@rs-native-kit/version-check 0.1.2

package/lib/typescript/src/data/config/ConfigCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigCache.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/ConfigCache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAI3E;;;;GAIG;AACH,qBAAa,WAAY,YAAW,YAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,gBAAgB;IAEhD,YAAY,IAAI,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAY5D,YAAY,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxE"}

package/lib/typescript/src/data/config/ConfigDocumentValidator.d.ts

@@ -0,0 +1,20 @@
+import type { BoundaryValidationResult, RawConfigDocument, SchemaValidationResult } from '../../domain/models/ConfigDocument';
+import type { IConfigValidator } from '../../domain/ports/IConfigSources';
+/** Doc 03 §2.2 — serialized document size cap, enforced before parsing even begins. */
+export declare const CONFIG_ENVELOPE_MAX_BYTES: number;
+/**
+ * Hand-rolled, zero-dependency structural validator (Prompt 1 §9.3 — no ajv) that walks
+ * a SignedConfigEnvelope against the JSON Schema in doc 03 §6: required-field presence,
+ * type checks, enum membership, and additionalProperties:false at every level (unknown
+ * fields are rejected, not silently ignored — §2.1's downgrade-attack rationale).
+ */
+export declare class ConfigDocumentValidator implements IConfigValidator {
+    validateSchema(doc: RawConfigDocument): SchemaValidationResult;
+    validateBoundaries(doc: RawConfigDocument): BoundaryValidationResult;
+    private isValidSemVer;
+    private checkStoreShape;
+    private validatePayloadShape;
+    private requireField;
+    private checkAdditionalProperties;
+}
+//# sourceMappingURL=ConfigDocumentValidator.d.ts.map

package/lib/typescript/src/data/config/ConfigDocumentValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigDocumentValidator.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/ConfigDocumentValidator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,uFAAuF;AACvF,eAAO,MAAM,yBAAyB,QAAY,CAAC;AAcnD;;;;;GAKG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,sBAAsB;IA0E9D,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,wBAAwB;IAkHpE,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,oBAAoB;IAqB5B,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,yBAAyB;CAYlC"}

package/lib/typescript/src/data/config/ConfigLoader.d.ts

@@ -0,0 +1,28 @@
+import type { ConfigLoadRequest } from '../../domain/models/ConfigDocument';
+import type { IConfigProvider } from '../../domain/ports/IConfigProvider';
+import type { Unsubscribe } from '../../domain/models/Unsubscribe';
+import type { ResolvedVersionManagerConfig, VersionManagerOptions } from '../../domain/models/VersionManagerOptions';
+import type { ConfigResolutionPipeline } from './ConfigResolutionPipeline';
+/**
+ * Synchronous default-merge (doc 03 §4.2 tier 4 only). Kept as a plain function, not
+ * just a method on ConfigLoader, so the DI composition root (src/di/container.ts) can
+ * validate + resolve synchronously at configure()-time (doc 02 §1.3's fail-fast
+ * requirement) without awaiting a Promise, and so ConfigResolutionPipeline can call it
+ * as its always-valid tier-4 floor (doc 03 §7.2's termination guarantee).
+ */
+export declare function resolveConfigSync(defaults: VersionManagerOptions): ResolvedVersionManagerConfig;
+/**
+ * Doc 03 §0's IConfigProvider implementation — thin wrapper around
+ * ConfigResolutionPipeline that adds change-detection so subscribe() only fires when a
+ * later resolution actually differs from the last one (§4.4 hot-update contract).
+ */
+export declare class ConfigLoader implements IConfigProvider {
+    private readonly pipeline?;
+    private readonly listeners;
+    private lastResolved;
+    constructor(pipeline?: ConfigResolutionPipeline | undefined);
+    resolve(defaults: VersionManagerOptions): Promise<ResolvedVersionManagerConfig>;
+    load(request: ConfigLoadRequest): Promise<ResolvedVersionManagerConfig>;
+    subscribe(listener: (config: ResolvedVersionManagerConfig) => void): Unsubscribe;
+}
+//# sourceMappingURL=ConfigLoader.d.ts.map

package/lib/typescript/src/data/config/ConfigLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigLoader.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/ConfigLoader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EACV,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAG3E;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,qBAAqB,GAC9B,4BAA4B,CAsC9B;AAED;;;;GAIG;AACH,qBAAa,YAAa,YAAW,eAAe;IAMtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IALtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAEtB;IACJ,OAAO,CAAC,YAAY,CAA6C;gBAEpC,QAAQ,CAAC,EAAE,wBAAwB,YAAA;IAE1D,OAAO,CACX,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,4BAA4B,CAAC;IAelC,IAAI,CACR,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,CAAC;IAIxC,SAAS,CACP,QAAQ,EAAE,CAAC,MAAM,EAAE,4BAA4B,KAAK,IAAI,GACvD,WAAW;CAMf"}

package/lib/typescript/src/data/config/ConfigProvider.d.ts

@@ -0,0 +1,30 @@
+import type { ConfigResolutionPipelineDeps } from './ConfigResolutionPipeline';
+import type { ConfigLoadRequest } from '../../domain/models/ConfigDocument';
+import type { IConfigProvider } from '../../domain/ports/IConfigProvider';
+import type { Unsubscribe } from '../../domain/ports/IPlatformBridge';
+import type { ResolvedVersionManagerConfig, VersionManagerOptions } from '../../domain/models/VersionManagerOptions';
+export interface ConfigProviderDeps extends ConfigResolutionPipelineDeps {
+    /** Background remote-refresh cadence for subscribe() (doc 03 §4.4). 0/undefined disables polling — resolve() still works. */
+    readonly refreshIntervalMs?: number;
+}
+/**
+ * IConfigProvider adapter around ConfigResolutionPipeline — resolve()/load() delegate
+ * straight through, and subscribe() adds the doc 03 §4.4 "hot-update" behavior the raw
+ * pipeline doesn't provide on its own: a background poll that re-runs resolution and
+ * notifies listeners only when the resolved config actually changed.
+ */
+export declare class ConfigProvider implements IConfigProvider {
+    private readonly pipeline;
+    private readonly refreshIntervalMs;
+    private readonly listeners;
+    private timer;
+    private lastConfig;
+    private lastOptions;
+    constructor(deps: ConfigProviderDeps);
+    resolve(defaults: VersionManagerOptions): Promise<ResolvedVersionManagerConfig>;
+    load(request: ConfigLoadRequest): Promise<ResolvedVersionManagerConfig>;
+    subscribe(listener: (config: ResolvedVersionManagerConfig) => void): Unsubscribe;
+    private ensurePolling;
+    private refresh;
+}
+//# sourceMappingURL=ConfigProvider.d.ts.map

package/lib/typescript/src/data/config/ConfigProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigProvider.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/ConfigProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,KAAK,EACV,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,WAAW,kBAAmB,SAAQ,4BAA4B;IACtE,6HAA6H;IAC7H,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;GAKG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAEtB;IACJ,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,UAAU,CAA6C;IAC/D,OAAO,CAAC,WAAW,CAAsC;gBAE7C,IAAI,EAAE,kBAAkB;IAK9B,OAAO,CACX,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,4BAA4B,CAAC;IAOxC,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAIvE,SAAS,CACP,QAAQ,EAAE,CAAC,MAAM,EAAE,4BAA4B,KAAK,IAAI,GACvD,WAAW;IAYd,OAAO,CAAC,aAAa;YAOP,OAAO;CAatB"}

package/lib/typescript/src/data/config/ConfigResolutionPipeline.d.ts

@@ -0,0 +1,49 @@
+import type { ConfigTier } from '../../domain/models/ConfigDocument';
+import type { VersionManagerException } from '../../domain/errors/VersionManagerException';
+import type { IConfigCache, IConfigValidator, IEnvironmentOverrideSource, ILocalConfigSource, IRemoteConfigSource, ISignatureVerifier } from '../../domain/ports/IConfigSources';
+import type { IClock } from '../../domain/ports/IClock';
+import type { ResolvedVersionManagerConfig, VersionManagerOptions } from '../../domain/models/VersionManagerOptions';
+export interface ConfigResolutionPipelineDeps {
+    readonly local: ILocalConfigSource;
+    readonly remote: IRemoteConfigSource;
+    readonly envOverrides: IEnvironmentOverrideSource;
+    readonly cache: IConfigCache;
+    readonly validator: IConfigValidator;
+    readonly signatureVerifier: ISignatureVerifier;
+    readonly clock: IClock;
+    /** §7.4 — default 5, configurable. */
+    readonly circuitBreakerThreshold?: number;
+    /** §7.4 cool-down window once the breaker trips. */
+    readonly circuitBreakerCooldownMs?: number;
+    readonly onError?: (error: VersionManagerException) => void;
+}
+export interface ConfigResolutionResult {
+    readonly config: ResolvedVersionManagerConfig;
+    readonly tier: ConfigTier;
+}
+/**
+ * Doc 03's ConfigResolutionPipeline — orchestrates §3.2 (schema -> boundary -> signature
+ * validation), §4.2 (per-field precedence merge, env > remote > local > default), §4.3
+ * (access path), §7.2 (cascading fallback), §7.3 (field vs whole-document fallback), and
+ * §7.4 (quarantine + circuit breaker). Lives in src/data/config/ per doc 03 §0.
+ */
+export declare class ConfigResolutionPipeline {
+    private readonly deps;
+    private readonly quarantinedFingerprints;
+    private consecutiveRemoteFailures;
+    private circuitOpenUntil;
+    constructor(deps: ConfigResolutionPipelineDeps);
+    resolve(defaults: VersionManagerOptions): Promise<ConfigResolutionResult>;
+    private readLocal;
+    private readRemote;
+    private recordRemoteFailure;
+    /**
+     * §3.2 sequence: schema -> boundary -> canonicalize -> verify signature. Returns the
+     * validated payload (with any boundary-failed fields stripped per §7.3's field-level
+     * fallback) or null if the whole document must be rejected (schema failure or
+     * signature failure — §7.3's whole-document fallback).
+     */
+    private validateAndVerify;
+    private report;
+}
+//# sourceMappingURL=ConfigResolutionPipeline.d.ts.map

package/lib/typescript/src/data/config/ConfigResolutionPipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigResolutionPipeline.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/ConfigResolutionPipeline.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,UAAU,EAKX,MAAM,oCAAoC,CAAC;AAS5C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EACV,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,oDAAoD;IACpD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IAKvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAqB;IAC7D,OAAO,CAAC,yBAAyB,CAAK;IACtC,OAAO,CAAC,gBAAgB,CAAK;gBAEA,IAAI,EAAE,4BAA4B;IAEzD,OAAO,CACX,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;YAmDpB,SAAS;YAUT,UAAU;IAoDxB,OAAO,CAAC,mBAAmB;IAS3B;;;;;OAKG;YACW,iBAAiB;IAiF/B,OAAO,CAAC,MAAM;CAYf"}

package/lib/typescript/src/data/config/ConfigValidator.d.ts

@@ -0,0 +1,10 @@
+import type { VersionManagerOptions } from '../../domain/models/VersionManagerOptions';
+/**
+ * Boundary validation (Prompt 3 §2.2) for the "default fallback" config tier — the
+ * VersionManagerOptions object passed to configure(). Full JSON-Schema structural
+ * validation and signature verification for local/remote config documents (Prompt 3
+ * §2.1, §3) are scoped to the not-yet-built config-document pipeline; see
+ * docs/architecture/03-configuration-system.md.
+ */
+export declare function validateOptions(options: VersionManagerOptions): void;
+//# sourceMappingURL=ConfigValidator.d.ts.map

package/lib/typescript/src/data/config/ConfigValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigValidator.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/ConfigValidator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAmEpE"}

package/lib/typescript/src/data/config/SignatureVerifier.d.ts

@@ -0,0 +1,16 @@
+import type { SignatureVerificationResult, SignedConfigEnvelope, TrustedKeySet } from '../../domain/models/ConfigDocument';
+import type { ICryptoProvider } from '../../domain/ports/IPlatformBridge';
+import type { ISignatureVerifier } from '../../domain/ports/IConfigSources';
+/**
+ * Doc 03 §3.2/§3.4 — verification calls are implemented using OS-provided cryptography
+ * exclusively (iOS CryptoKit/Security.framework, Android java.security), reached through
+ * IPlatformBridge.crypto (ICryptoProvider) so this class never itself hand-rolls
+ * cryptographic primitives (Prompt 1 §9.3's zero-external-dependency constraint extends
+ * to "don't implement crypto in JS either" — only OS APIs are trusted for this).
+ */
+export declare class SignatureVerifier implements ISignatureVerifier {
+    private readonly crypto?;
+    constructor(crypto?: ICryptoProvider | undefined);
+    verify(envelope: SignedConfigEnvelope, trustedKeys: TrustedKeySet): Promise<SignatureVerificationResult>;
+}
+//# sourceMappingURL=SignatureVerifier.d.ts.map

package/lib/typescript/src/data/config/SignatureVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignatureVerifier.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/SignatureVerifier.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,2BAA2B,EAC3B,oBAAoB,EACpB,aAAa,EACd,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAQ5E;;;;;;GAMG;AACH,qBAAa,iBAAkB,YAAW,kBAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAP,MAAM,CAAC,EAAE,eAAe,YAAA;IAE/C,MAAM,CACV,QAAQ,EAAE,oBAAoB,EAC9B,WAAW,EAAE,aAAa,GACzB,OAAO,CAAC,2BAA2B,CAAC;CA6DxC"}

package/lib/typescript/src/data/config/canonicalize.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Hand-rolled canonicalizer (Prompt 1 §9.3 zero-dependency constraint), implementing the
+ * same principles as RFC 8785 (JSON Canonicalization Scheme) that doc 03 §3.3 calls for:
+ * recursive key sorting by UTF-16 code unit order, fixed number formatting, no
+ * insignificant whitespace. Signatures are computed/verified over this canonical byte
+ * form so that whitespace/key-order differences in transit never invalidate a
+ * legitimately signed document.
+ */
+/** Canonical byte sequence (as a UTF-8 string) for the given JSON-compatible value. */
+export declare function canonicalize(value: unknown): string;
+/** Base64 encoding of the UTF-8 bytes of a string, without relying on Node's Buffer. */
+export declare function utf8ToBase64(input: string): string;
+//# sourceMappingURL=canonicalize.d.ts.map

package/lib/typescript/src/data/config/canonicalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize.d.ts","sourceRoot":"","sources":["../../../../../src/data/config/canonicalize.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyCH,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYlD"}

package/lib/typescript/src/data/config/sources/EnvironmentOverrideSource.d.ts

@@ -0,0 +1,17 @@
+import type { VersionManagerConfigDocument } from '../../../domain/models/ConfigDocument';
+import type { IEnvironmentOverrideSource } from '../../../domain/ports/IConfigSources';
+/**
+ * Doc 03 §4 — "there is no OS process environment on a device"; this tier maps to
+ * build-time-injected constants and explicit runtime overrides, not `process.env` on a
+ * server. Build-time constants (Info.plist / BuildConfig fields) are app-specific and
+ * have no generic cross-platform read path from JS, so this implementation covers the
+ * "explicit configure({ configSources: { envOverrides } })" half of §4.1 tier 1 — the
+ * build-time-constant half is a per-app integration concern (documented, not a gap in
+ * this port's contract, which only promises "read whatever overrides are available").
+ */
+export declare class EnvironmentOverrideSource implements IEnvironmentOverrideSource {
+    private readonly overrides;
+    constructor(overrides: Partial<VersionManagerConfigDocument> | undefined);
+    read(): Promise<Partial<VersionManagerConfigDocument>>;
+}
+//# sourceMappingURL=EnvironmentOverrideSource.d.ts.map

package/lib/typescript/src/data/config/sources/EnvironmentOverrideSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvironmentOverrideSource.d.ts","sourceRoot":"","sources":["../../../../../../src/data/config/sources/EnvironmentOverrideSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,YAAW,0BAA0B;IAExE,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EACxB,OAAO,CAAC,4BAA4B,CAAC,GAAG,SAAS;IAG/C,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAG7D"}

package/lib/typescript/src/data/config/sources/LocalConfigSource.d.ts

@@ -0,0 +1,19 @@
+import type { RawConfigDocument, SignedConfigEnvelope } from '../../../domain/models/ConfigDocument';
+import type { ILocalConfigSource } from '../../../domain/ports/IConfigSources';
+/**
+ * Doc 03 §5.1 — the design calls for a native mmap reader (iOS Data(alwaysMapped),
+ * Android FileChannel.map) to avoid a double-copy when reading a bundled config asset.
+ * This implementation takes a documented, lower-risk equivalent instead: the host app
+ * imports its bundled config JSON via Metro/webpack's native JSON module support
+ * (`import localConfig from './vm-config.json'`) and passes the parsed envelope through
+ * `VersionManagerOptions.configSources.local`. Metro's JSON loader already avoids the
+ * page-cache -> native-heap -> JS-heap double copy for typical bundle sizes (the asset
+ * is compiled into the JS bundle itself), which satisfies §5.1's actual goal (avoid GC
+ * churn against the 5MB budget for a <=64KB document) without a dedicated native reader.
+ */
+export declare class LocalConfigSource implements ILocalConfigSource {
+    private readonly envelope;
+    constructor(envelope: SignedConfigEnvelope | undefined);
+    read(): Promise<RawConfigDocument | null>;
+}
+//# sourceMappingURL=LocalConfigSource.d.ts.map

package/lib/typescript/src/data/config/sources/LocalConfigSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalConfigSource.d.ts","sourceRoot":"","sources":["../../../../../../src/data/config/sources/LocalConfigSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,qBAAa,iBAAkB,YAAW,kBAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,oBAAoB,GAAG,SAAS;IAEjE,IAAI,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;CAGhD"}

package/lib/typescript/src/data/config/sources/RemoteConfigSource.d.ts

@@ -0,0 +1,10 @@
+import type { FetchOptions, RawConfigDocument } from '../../../domain/models/ConfigDocument';
+import type { IRemoteConfigSource } from '../../../domain/ports/IConfigSources';
+import type { IHttpClient } from '../../../domain/ports/IPlatformBridge';
+/** Doc 03 §4.3 — the remote-fetch tier, reached through the same IHttpClient port every other network call in this SDK uses. */
+export declare class RemoteConfigSource implements IRemoteConfigSource {
+    private readonly http;
+    constructor(http: IHttpClient);
+    fetch(url: string, options: FetchOptions): Promise<RawConfigDocument>;
+}
+//# sourceMappingURL=RemoteConfigSource.d.ts.map

package/lib/typescript/src/data/config/sources/RemoteConfigSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoteConfigSource.d.ts","sourceRoot":"","sources":["../../../../../../src/data/config/sources/RemoteConfigSource.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EAClB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAEzE,gIAAgI;AAChI,qBAAa,kBAAmB,YAAW,mBAAmB;IAChD,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAExC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAyB5E"}

package/lib/typescript/src/data/providers/amazon/AmazonAppstoreProvider.d.ts

@@ -0,0 +1,9 @@
+import type { StoreProviderId } from '../../../domain/models/PlatformId';
+import type { StoreLookupResult } from '../../../domain/models/StoreLookup';
+import type { IStoreProvider } from '../../../domain/ports/IStoreProvider';
+/** Not yet implemented — see Prompt 11 in the design series. */
+export declare class AmazonAppstoreProvider implements IStoreProvider {
+    readonly id: StoreProviderId;
+    fetchLatestVersionInfo(): Promise<StoreLookupResult>;
+}
+//# sourceMappingURL=AmazonAppstoreProvider.d.ts.map

package/lib/typescript/src/data/providers/amazon/AmazonAppstoreProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AmazonAppstoreProvider.d.ts","sourceRoot":"","sources":["../../../../../../src/data/providers/amazon/AmazonAppstoreProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAE3E,gEAAgE;AAChE,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAY;IAElC,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAM3D"}

package/lib/typescript/src/data/providers/apple/AppleStoreProvider.d.ts

@@ -0,0 +1,19 @@
+import type { StoreProviderId } from '../../../domain/models/PlatformId';
+import type { StoreLookupRequest, StoreLookupResult } from '../../../domain/models/StoreLookup';
+import type { IHttpClient } from '../../../domain/ports/IPlatformBridge';
+import type { IStoreProvider } from '../../../domain/ports/IStoreProvider';
+/**
+ * Real implementation against the public iTunes Lookup API (Prompt 10). Accepts either
+ * the numeric App Store Connect id (`id=`) or, when the app developer doesn't want to
+ * hardcode one, falls back to looking the app up by its own bundle id (`bundleId=`) —
+ * the iTunes Lookup API supports both query params equivalently.
+ */
+export declare class AppleStoreProvider implements IStoreProvider {
+    private readonly http;
+    private readonly appStoreId?;
+    private readonly region;
+    readonly id: StoreProviderId;
+    constructor(http: IHttpClient, appStoreId?: string | undefined, region?: string);
+    fetchLatestVersionInfo(request: StoreLookupRequest): Promise<StoreLookupResult>;
+}
+//# sourceMappingURL=AppleStoreProvider.d.ts.map

package/lib/typescript/src/data/providers/apple/AppleStoreProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppleStoreProvider.d.ts","sourceRoot":"","sources":["../../../../../../src/data/providers/apple/AppleStoreProvider.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAc3E;;;;;GAKG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAIrD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAW;gBAGpB,IAAI,EAAE,WAAW,EACjB,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,MAAM,GAAE,MAAa;IAGlC,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC;CAmD9B"}

package/lib/typescript/src/data/providers/custom-api/CustomApiProvider.d.ts

@@ -0,0 +1,14 @@
+import type { StoreProviderId } from '../../../domain/models/PlatformId';
+import type { StoreLookupRequest, StoreLookupResult } from '../../../domain/models/StoreLookup';
+import type { IHttpClient } from '../../../domain/ports/IPlatformBridge';
+import type { IStoreProvider } from '../../../domain/ports/IStoreProvider';
+/** Generic enterprise/private-distribution provider (Prompt 12). */
+export declare class CustomApiProvider implements IStoreProvider {
+    private readonly http;
+    private readonly url;
+    private readonly headers;
+    readonly id: StoreProviderId;
+    constructor(http: IHttpClient, url: string, headers?: Readonly<Record<string, string>>);
+    fetchLatestVersionInfo(request: StoreLookupRequest): Promise<StoreLookupResult>;
+}
+//# sourceMappingURL=CustomApiProvider.d.ts.map

package/lib/typescript/src/data/providers/custom-api/CustomApiProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomApiProvider.d.ts","sourceRoot":"","sources":["../../../../../../src/data/providers/custom-api/CustomApiProvider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAS3E,oEAAoE;AACpE,qBAAa,iBAAkB,YAAW,cAAc;IAIpD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAY;gBAGrB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM;IAG3D,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC;CA2C9B"}

package/lib/typescript/src/data/providers/firebase-remote-config/FirebaseRemoteConfigProvider.d.ts

@@ -0,0 +1,9 @@
+import type { StoreProviderId } from '../../../domain/models/PlatformId';
+import type { StoreLookupResult } from '../../../domain/models/StoreLookup';
+import type { IStoreProvider } from '../../../domain/ports/IStoreProvider';
+/** Not yet implemented — see Prompt 13 in the design series. */
+export declare class FirebaseRemoteConfigProvider implements IStoreProvider {
+    readonly id: StoreProviderId;
+    fetchLatestVersionInfo(): Promise<StoreLookupResult>;
+}
+//# sourceMappingURL=FirebaseRemoteConfigProvider.d.ts.map

package/lib/typescript/src/data/providers/firebase-remote-config/FirebaseRemoteConfigProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FirebaseRemoteConfigProvider.d.ts","sourceRoot":"","sources":["../../../../../../src/data/providers/firebase-remote-config/FirebaseRemoteConfigProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAE3E,gEAAgE;AAChE,qBAAa,4BAA6B,YAAW,cAAc;IACjE,QAAQ,CAAC,EAAE,EAAE,eAAe,CAA4B;IAElD,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAM3D"}

package/lib/typescript/src/data/providers/google-play/GooglePlayProvider.d.ts

@@ -0,0 +1,22 @@
+import type { StoreProviderId } from '../../../domain/models/PlatformId';
+import type { StoreLookupRequest, StoreLookupResult } from '../../../domain/models/StoreLookup';
+import type { IHttpClient } from '../../../domain/ports/IPlatformBridge';
+import type { IStoreProvider } from '../../../domain/ports/IStoreProvider';
+/**
+ * Google Play has no public, unauthenticated lookup API (Prompt 10). This provider is a
+ * best-effort parser of the public store listing page's inline JSON blob. It is
+ * inherently fragile — Play Store markup can change without notice — and is offered as
+ * a pragmatic default; production deployments with a Google Play Developer API service
+ * account should prefer a IStoreProvider backed by that authenticated API instead.
+ *
+ * packageName is optional — on Android the app's own bundle id *is* its package name,
+ * so when it's not supplied explicitly this falls back to request.bundleId.
+ */
+export declare class GooglePlayProvider implements IStoreProvider {
+    private readonly http;
+    private readonly packageName?;
+    readonly id: StoreProviderId;
+    constructor(http: IHttpClient, packageName?: string | undefined);
+    fetchLatestVersionInfo(request: StoreLookupRequest): Promise<StoreLookupResult>;
+}
+//# sourceMappingURL=GooglePlayProvider.d.ts.map

package/lib/typescript/src/data/providers/google-play/GooglePlayProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GooglePlayProvider.d.ts","sourceRoot":"","sources":["../../../../../../src/data/providers/google-play/GooglePlayProvider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAE3E;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAIrD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAJ/B,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAiB;gBAG1B,IAAI,EAAE,WAAW,EACjB,WAAW,CAAC,EAAE,MAAM,YAAA;IAGjC,sBAAsB,CAC1B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC;CAqC9B"}

package/lib/typescript/src/data/providers/huawei/HuaweiAppGalleryProvider.d.ts

@@ -0,0 +1,14 @@
+import type { StoreProviderId } from '../../../domain/models/PlatformId';
+import type { StoreLookupResult } from '../../../domain/models/StoreLookup';
+import type { IStoreProvider } from '../../../domain/ports/IStoreProvider';
+/**
+ * Not yet implemented — Huawei AppGallery integration is designed in Prompt 11 of this
+ * series (AG Connect API parameters, error-code mapping) but not built in this pass.
+ * The file exists so the provider is independently importable/tree-shakeable
+ * (Prompt 1 §8) without pulling in Apple/Google/Custom code.
+ */
+export declare class HuaweiAppGalleryProvider implements IStoreProvider {
+    readonly id: StoreProviderId;
+    fetchLatestVersionInfo(): Promise<StoreLookupResult>;
+}
+//# sourceMappingURL=HuaweiAppGalleryProvider.d.ts.map

package/lib/typescript/src/data/providers/huawei/HuaweiAppGalleryProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HuaweiAppGalleryProvider.d.ts","sourceRoot":"","sources":["../../../../../../src/data/providers/huawei/HuaweiAppGalleryProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAE3E;;;;;GAKG;AACH,qBAAa,wBAAyB,YAAW,cAAc;IAC7D,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAY;IAElC,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAM3D"}

package/lib/typescript/src/data/repositories/VersionRepositoryImpl.d.ts

@@ -0,0 +1,23 @@
+import type { RemoteVersionInfo, UserVersionDecision, VersionCheckRequest } from '../../domain/models/RemoteVersionInfo';
+import type { ICacheStore } from '../../domain/ports/ICacheStore';
+import type { IClock } from '../../domain/ports/IClock';
+import type { IKeyValueStorage } from '../../domain/ports/IPlatformBridge';
+import type { IStoreProvider } from '../../domain/ports/IStoreProvider';
+import type { IVersionRepository } from '../../domain/ports/IVersionRepository';
+/**
+ * Sequential fallback across registered providers (Prompt 14's simpler tier): the first
+ * provider to succeed wins. Only providers the host app actually registers via DI
+ * reach this list — nothing here imports a provider it doesn't need (Prompt 1 §8).
+ */
+export declare class VersionRepositoryImpl implements IVersionRepository {
+    private readonly providers;
+    private readonly cache;
+    private readonly storage;
+    private readonly clock;
+    constructor(providers: readonly IStoreProvider[], cache: ICacheStore<RemoteVersionInfo>, storage: IKeyValueStorage, clock: IClock);
+    getRemoteVersionInfo(request: VersionCheckRequest): Promise<RemoteVersionInfo>;
+    getCachedVersionInfo(): Promise<RemoteVersionInfo | null>;
+    persistUserDecision(decision: UserVersionDecision): Promise<void>;
+    getUserDecision(): Promise<UserVersionDecision | null>;
+}
+//# sourceMappingURL=VersionRepositoryImpl.d.ts.map

package/lib/typescript/src/data/repositories/VersionRepositoryImpl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VersionRepositoryImpl.d.ts","sourceRoot":"","sources":["../../../../../src/data/repositories/VersionRepositoryImpl.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAKhF;;;;GAIG;AACH,qBAAa,qBAAsB,YAAW,kBAAkB;IAE5D,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAHL,SAAS,EAAE,SAAS,cAAc,EAAE,EACpC,KAAK,EAAE,WAAW,CAAC,iBAAiB,CAAC,EACrC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,MAAM;IAG1B,oBAAoB,CACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IAuCvB,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAIzD,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,eAAe,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;CAS7D"}

package/lib/typescript/src/di/container.d.ts

@@ -0,0 +1,12 @@
+import type { VersionManagerOptions } from '../domain/models/VersionManagerOptions';
+import type { IVersionManagerCore } from '../domain/IVersionManagerCore';
+/**
+ * Composition root (Prompt 1 §1.3) — the only file in the codebase that imports both a
+ * port and its concrete adapter simultaneously. Only Apple/Google Play/Custom API
+ * providers are wired here; Huawei/Amazon/Firebase Remote Config providers exist as
+ * independently importable files (Prompt 1 §8) but are intentionally not referenced
+ * from this file yet since their implementations are still stubs (see those files'
+ * doc comments) — wiring them here would defeat tree-shaking for no behavioral benefit.
+ */
+export declare function createVersionManagerCore(options: VersionManagerOptions): IVersionManagerCore;
+//# sourceMappingURL=container.d.ts.map

package/lib/typescript/src/di/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../src/di/container.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,qBAAqB,EACtB,MAAM,wCAAwC,CAAC;AAIhD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAIzE;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAC7B,mBAAmB,CAsDrB"}

package/lib/typescript/src/domain/IVersionManagerCore.d.ts

@@ -0,0 +1,30 @@
+import type { ActionPlan } from './models/ActionPlan';
+import type { StateChangedEvent, UpdateDetectedEvent, UserActionEvent, VersionManagerErrorEvent, VersionManagerEventMap } from './models/Events';
+import type { LifecycleState } from './models/LifecycleState';
+import type { CheckForUpdatesOptions, ForceTriggerOptions, ResetIgnoredVersionsOptions } from './models/PublicApiOptions';
+import type { UpdateInfo } from './models/UpdateInfo';
+import type { Unsubscribe } from './models/Unsubscribe';
+/** Public event subscription surface (Prompt 2 §4.2). */
+export interface IVersionManagerEvents {
+    on<K extends keyof VersionManagerEventMap>(event: K, handler: (payload: VersionManagerEventMap[K]) => void): Unsubscribe;
+    once<K extends keyof VersionManagerEventMap>(event: K, handler: (payload: VersionManagerEventMap[K]) => void): Unsubscribe;
+    off<K extends keyof VersionManagerEventMap>(event: K, handler: (payload: VersionManagerEventMap[K]) => void): void;
+    onUpdateDetected(handler: (e: UpdateDetectedEvent) => void): Unsubscribe;
+    onUserAction(handler: (e: UserActionEvent) => void): Unsubscribe;
+    onError(handler: (e: VersionManagerErrorEvent) => void): Unsubscribe;
+    onStateChanged(handler: (e: StateChangedEvent) => void): Unsubscribe;
+}
+/** The single class Domain exposes outward (Prompt 1 §3; full spec in Prompt 2). */
+export interface IVersionManagerCore extends IVersionManagerEvents {
+    ready(): Promise<void>;
+    checkForUpdates(options?: CheckForUpdatesOptions): Promise<ActionPlan>;
+    forceTriggerUpdate(options?: ForceTriggerOptions): Promise<void>;
+    resetIgnoredVersions(options?: ResetIgnoredVersionsOptions): Promise<void>;
+    getCurrentState(): LifecycleState;
+    getUpdateInfo(): UpdateInfo | null;
+    isUpdateAvailable(): boolean;
+    getActionPlan(): ActionPlan | null;
+    getLastCheckedAt(): number | null;
+    dispose(): void;
+}
+//# sourceMappingURL=IVersionManagerCore.d.ts.map

package/lib/typescript/src/domain/IVersionManagerCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IVersionManagerCore.d.ts","sourceRoot":"","sources":["../../../../src/domain/IVersionManagerCore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,yDAAyD;AACzD,MAAM,WAAW,qBAAqB;IACpC,EAAE,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACvC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,IAAI,GACpD,WAAW,CAAC;IACf,IAAI,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACzC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,IAAI,GACpD,WAAW,CAAC;IACf,GAAG,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACxC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,IAAI,GACpD,IAAI,CAAC;IAER,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,mBAAmB,KAAK,IAAI,GAAG,WAAW,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,GAAG,WAAW,CAAC;IACjE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,wBAAwB,KAAK,IAAI,GAAG,WAAW,CAAC;IACrE,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,iBAAiB,KAAK,IAAI,GAAG,WAAW,CAAC;CACtE;AAED,oFAAoF;AACpF,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,eAAe,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACvE,kBAAkB,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,oBAAoB,CAAC,OAAO,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E,eAAe,IAAI,cAAc,CAAC;IAClC,aAAa,IAAI,UAAU,GAAG,IAAI,CAAC;IACnC,iBAAiB,IAAI,OAAO,CAAC;IAC7B,aAAa,IAAI,UAAU,GAAG,IAAI,CAAC;IACnC,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAAC;IAElC,OAAO,IAAI,IAAI,CAAC;CACjB"}

package/lib/typescript/src/domain/VersionManagerCore.d.ts

@@ -0,0 +1,94 @@
+import type { DecisionEngine } from './engines/decision/DecisionEngine';
+import type { IUpdatePolicyEngine } from './engines/policy/IUpdatePolicyEngine';
+import type { IVersionComparator } from './engines/semver/IVersionComparator';
+import type { ActionPlan } from './models/ActionPlan';
+import type { StateChangedEvent, UpdateDetectedEvent, UserActionEvent, VersionManagerErrorEvent, VersionManagerEventMap } from './models/Events';
+import { LifecycleState } from './models/LifecycleState';
+import type { CheckForUpdatesOptions, ForceTriggerOptions, ResetIgnoredVersionsOptions } from './models/PublicApiOptions';
+import type { ResolvedVersionManagerConfig } from './models/VersionManagerOptions';
+import type { UpdateInfo } from './models/UpdateInfo';
+import type { Unsubscribe } from './models/Unsubscribe';
+import type { IVersionManagerCore } from './IVersionManagerCore';
+import type { IClock } from './ports/IClock';
+import type { IConfigProvider } from './ports/IConfigProvider';
+import type { IPlatformBridge } from './ports/IPlatformBridge';
+import type { IVersionRepository } from './ports/IVersionRepository';
+import type { IEventBus } from '../shared/eventbus/EventBus';
+import type { ILifecycleStateMachine } from './statemachine/LifecycleStateMachine';
+import type { VersionManagerOptions } from './models/VersionManagerOptions';
+export interface VersionManagerCoreDeps {
+    /** Tier-4-only synchronous resolution (doc 02 §1.3 fail-fast) — used to bootstrap
+     * before configProvider's full async pipeline (doc 03) resolves, and as the
+     * always-available fallback floor. */
+    readonly config: ResolvedVersionManagerConfig;
+    readonly rawOptions: VersionManagerOptions;
+    readonly platformBridge: IPlatformBridge;
+    readonly repository: IVersionRepository;
+    readonly comparator: IVersionComparator;
+    readonly policyEngine: IUpdatePolicyEngine;
+    readonly decisionEngine: DecisionEngine;
+    readonly eventBus: IEventBus<VersionManagerEventMap>;
+    readonly clock: IClock;
+    readonly stateMachine?: ILifecycleStateMachine;
+    /** Doc 03 full local/remote/env resolution pipeline — optional so tests/simple
+     * wiring can omit it and run on tier-4-only config, same as before this pass. */
+    readonly configProvider?: IConfigProvider;
+}
+/**
+ * The concrete IVersionManagerCore. Composed entirely from ports and other domain
+ * constructs (Prompt 1 §1.3) — every concrete adapter (repository impl, platform
+ * bridge impl) is injected by src/di/container.ts, never imported here directly.
+ */
+export declare class VersionManagerCore implements IVersionManagerCore {
+    private readonly deps;
+    private readonly stateMachine;
+    private readonly checkUseCase;
+    private readonly resetUseCase;
+    private readonly forceUseCase;
+    private readonly readyPromise;
+    /**
+     * Mutable, doc 03 §4.4 "hot-update" target — starts at the tier-4-only sync
+     * resolution and is replaced (not merged in place — a fresh immutable object each
+     * time) once configProvider's full pipeline resolves, and again on every subsequent
+     * subscribe() notification. In-flight operations keep whatever reference they already
+     * captured; only the *next* operation observes an update, matching §4.4's guarantee.
+     */
+    private currentConfig;
+    private lastActionPlan;
+    private lastCheckedAt;
+    private inFlightCheck;
+    /**
+     * Non-persisted rollout bucket (0-99), stable for the process lifetime only.
+     * A device-stable bucket derived from a persisted installation id is Prompt 18
+     * scope — this is a documented simplification, not the final design.
+     */
+    private rolloutBucket;
+    constructor(deps: VersionManagerCoreDeps);
+    private initialize;
+    ready(): Promise<void>;
+    checkForUpdates(options?: CheckForUpdatesOptions): Promise<ActionPlan>;
+    private runCheck;
+    private runFallback;
+    private applyPlan;
+    private stateForActionType;
+    forceTriggerUpdate(_options?: ForceTriggerOptions): Promise<void>;
+    resetIgnoredVersions(options?: ResetIgnoredVersionsOptions): Promise<void>;
+    getCurrentState(): LifecycleState;
+    getUpdateInfo(): UpdateInfo | null;
+    isUpdateAvailable(): boolean;
+    getActionPlan(): ActionPlan | null;
+    getLastCheckedAt(): number | null;
+    on<K extends keyof VersionManagerEventMap>(event: K, handler: (payload: VersionManagerEventMap[K]) => void): Unsubscribe;
+    once<K extends keyof VersionManagerEventMap>(event: K, handler: (payload: VersionManagerEventMap[K]) => void): Unsubscribe;
+    off<K extends keyof VersionManagerEventMap>(event: K, handler: (payload: VersionManagerEventMap[K]) => void): void;
+    onUpdateDetected(handler: (e: UpdateDetectedEvent) => void): Unsubscribe;
+    onUserAction(handler: (e: UserActionEvent) => void): Unsubscribe;
+    onError(handler: (e: VersionManagerErrorEvent) => void): Unsubscribe;
+    onStateChanged(handler: (e: StateChangedEvent) => void): Unsubscribe;
+    dispose(): void;
+    private resolveCurrentVersion;
+    private getRolloutBucket;
+    private publishError;
+    private tryTransition;
+}
+//# sourceMappingURL=VersionManagerCore.d.ts.map

package/lib/typescript/src/domain/VersionManagerCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VersionManagerCore.d.ts","sourceRoot":"","sources":["../../../../src/domain/VersionManagerCore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAK7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAE5E,MAAM,WAAW,sBAAsB;IACrC;;0CAEsC;IACtC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAC/C;qFACiF;IACjF,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,YAAW,mBAAmB;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IAEzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,cAAc,CAA2B;IACjD,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,aAAa,CAAoC;IACzD;;;;OAIG;IACH,OAAO,CAAC,aAAa,CAAuB;gBAEhC,IAAI,EAAE,sBAAsB;YAqB1B,UAAU;IAkCxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhB,eAAe,CACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,UAAU,CAAC;YAsBR,QAAQ;YAiCR,WAAW;IAiCzB,OAAO,CAAC,SAAS;IAuBjB,OAAO,CAAC,kBAAkB;IAYpB,kBAAkB,CAAC,QAAQ,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBrE,oBAAoB,CACxB,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,IAAI,CAAC;IAIhB,eAAe,IAAI,cAAc;IAIjC,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,iBAAiB,IAAI,OAAO;IAO5B,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC,EAAE,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACvC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,IAAI,GACpD,WAAW;IAId,IAAI,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACzC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,IAAI,GACpD,WAAW;IAQd,GAAG,CAAC,CAAC,SAAS,MAAM,sBAAsB,EACxC,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,IAAI,GACpD,IAAI;IASP,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,mBAAmB,KAAK,IAAI,GAAG,WAAW;IAIxE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,GAAG,WAAW;IAIhE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,wBAAwB,KAAK,IAAI,GAAG,WAAW;IAIpE,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,iBAAiB,KAAK,IAAI,GAAG,WAAW;IAIpE,OAAO,IAAI,IAAI;YAID,qBAAqB;IAOnC,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,aAAa;CAsBtB"}

package/lib/typescript/src/domain/engines/decision/DecisionEngine.d.ts

@@ -0,0 +1,16 @@
+import type { IClock } from '../../ports/IClock';
+import { ActionType } from '../../models/ActionPlan';
+import type { ActionPlan } from '../../models/ActionPlan';
+import type { RemoteVersionInfo } from '../../models/RemoteVersionInfo';
+/**
+ * Assembles the final ActionPlan (with a fully-populated UpdateInfo, when relevant)
+ * from a PolicyEngine classification. Kept separate from PolicyEngine per the Prompt 7
+ * Decision Engine split in docs/architecture/01 §5.3 — this is the orchestration step,
+ * not the rule evaluation step.
+ */
+export declare class DecisionEngine {
+    private readonly clock;
+    constructor(clock: IClock);
+    buildActionPlan(actionType: ActionType, currentVersion: string, remote: RemoteVersionInfo | null): ActionPlan;
+}
+//# sourceMappingURL=DecisionEngine.d.ts.map