@run402/runtime-kernel 0.1.0

package/LICENSE

@@ -0,0 +1,3 @@
+Apache License 2.0
+
+See the repository root LICENSE file.

package/README.md

@@ -0,0 +1,8 @@
+# @run402/runtime-kernel
+
+Public Run402 Core runtime-kernel contracts and application services.
+
+This package is the first self-hostable Core runtime slice. It currently exposes the runtime capability document, typed unsupported-capability errors, and port contracts used by the public Core gateway composition root.
+
+It is a Developer Preview / single-node reference runtime component. It does not include functions, Astro SSR, export/import, hosted OAuth, managed backups, TLS automation, observability, or production hardening.
+

package/dist/apply.d.ts

@@ -0,0 +1,31 @@
+import { type ContentRefHex, type PortableReleaseState } from "@run402/release";
+import type { CoreApplyPlan, RuntimeKernelPorts } from "./ports.js";
+export interface CreateApplyPlanInput {
+    spec: unknown;
+}
+export interface CommitApplyPlanInput {
+    plan_id: string;
+    release_spec_digest?: string;
+}
+export interface CoreApplyCommitResult {
+    plan_id: string;
+    project_id: string;
+    release_id: string;
+    release_digest: string;
+    status: "committed" | "noop";
+}
+export declare class ApplyInvariantError extends Error {
+    readonly code: string;
+    readonly status = 409;
+    constructor(code: string, message: string);
+}
+export declare function applyInvariantEnvelope(error: ApplyInvariantError): {
+    error: string;
+    message: string;
+};
+export declare function createApplyPlan(ports: RuntimeKernelPorts, input: CreateApplyPlanInput): Promise<CoreApplyPlan>;
+export declare function commitApplyPlan(ports: RuntimeKernelPorts, input: CommitApplyPlanInput): Promise<CoreApplyCommitResult>;
+export declare function verifyContentRefBytes(ref: ContentRefHex, bytes: Uint8Array): void;
+export declare function releaseIdFromDigest(digest: string): string;
+export declare function emptyCoreReleaseState(): PortableReleaseState;
+//# sourceMappingURL=apply.d.ts.map

package/dist/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../src/apply.ts"],"names":[],"mappings":"AACA,OAAO,EAML,KAAK,aAAa,EAElB,KAAK,oBAAoB,EAE1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC;CAC9B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAGhC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFjC,QAAQ,CAAC,MAAM,OAAO;gBAED,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAInD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAKA;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,aAAa,CAAC,CA+BxB;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA0ChC;AAmFD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAOjF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG1D;AAoBD,wBAAgB,qBAAqB,IAAI,oBAAoB,CAE5D"}

package/dist/apply.js

@@ -0,0 +1,192 @@
+import { createHash } from "node:crypto";
+import { digestApplyRequest, digestMaterializedRelease, emptyPortableReleaseState, materializeRelease, parseReleaseSpec, } from "@run402/release";
+import { UnsupportedCapabilityError } from "./errors.js";
+import { validateProjectId } from "./projects.js";
+export class ApplyInvariantError extends Error {
+    code;
+    status = 409;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "ApplyInvariantError";
+    }
+}
+export function applyInvariantEnvelope(error) {
+    return {
+        error: error.code,
+        message: error.message,
+    };
+}
+export async function createApplyPlan(ports, input) {
+    const spec = parseReleaseSpec(input.spec);
+    validateSupportedSpec(spec);
+    validateProjectId(spec.project);
+    const project = await ports.projects.inspect(spec.project);
+    if (!project) {
+        throw new ApplyInvariantError("project_not_found", `Run402 Core project not found: ${spec.project}`);
+    }
+    const base = await ports.releases.getBase(spec.project, releaseBaseTarget(spec));
+    const target = materializeRelease({
+        spec,
+        concreteBase: base.state,
+    });
+    const releaseSpecDigest = digestApplyRequest(spec);
+    const targetDigest = digestMaterializedRelease(target);
+    const baseDigest = digestMaterializedRelease(base.state);
+    const targetReleaseId = releaseIdFromDigest(targetDigest);
+    const plan = await ports.plans.create({
+        project_id: spec.project,
+        spec,
+        release_spec_digest: releaseSpecDigest,
+        base_release_id: base.release_id,
+        target_release_id: targetReleaseId,
+        target_release_digest: targetDigest,
+        target_release: target,
+        noop: targetDigest === baseDigest,
+    });
+    return publicPlan(plan);
+}
+export async function commitApplyPlan(ports, input) {
+    const plan = await ports.plans.get(input.plan_id);
+    if (!plan) {
+        throw new ApplyInvariantError("plan_not_found", `Run402 Core apply plan not found: ${input.plan_id}`);
+    }
+    if (input.release_spec_digest && input.release_spec_digest !== plan.release_spec_digest) {
+        throw new ApplyInvariantError("release_spec_digest_mismatch", "Apply plan digest does not match commit input.");
+    }
+    if (plan.status === "committed") {
+        return {
+            plan_id: plan.plan_id,
+            project_id: plan.project_id,
+            release_id: plan.target_release_id,
+            release_digest: plan.target_release_digest,
+            status: plan.noop ? "noop" : "committed",
+        };
+    }
+    const spec = parseReleaseSpec(plan.spec);
+    const current = await ports.releases.getBase(plan.project_id, "current");
+    if (current.release_id !== plan.base_release_id) {
+        throw new ApplyInvariantError("stale_plan", "Apply plan base release no longer matches the active release.");
+    }
+    await verifyStaticContent(ports, plan.project_id, plan.target_release);
+    await applyMigrations(ports, spec);
+    await ports.releases.setActiveRelease({
+        projectId: plan.project_id,
+        releaseId: plan.target_release_id,
+        digest: plan.target_release_digest,
+        release: plan.target_release,
+        expectedBaseReleaseId: plan.base_release_id,
+    });
+    await ports.plans.markCommitted(plan.plan_id);
+    return {
+        plan_id: plan.plan_id,
+        project_id: plan.project_id,
+        release_id: plan.target_release_id,
+        release_digest: plan.target_release_digest,
+        status: plan.noop ? "noop" : "committed",
+    };
+}
+function validateSupportedSpec(spec) {
+    if (spec.functions)
+        throw new UnsupportedCapabilityError("functions.node");
+    if (spec.secrets)
+        throw new UnsupportedCapabilityError("secrets.hosted");
+    if (spec.subdomains)
+        throw new UnsupportedCapabilityError("subdomains.managed");
+    if (spec.assets)
+        throw new UnsupportedCapabilityError("storage.user-api");
+    if (spec.i18n)
+        throw new UnsupportedCapabilityError("i18n.routing");
+    if (spec.database?.zero_downtime)
+        throw new UnsupportedCapabilityError("database.zero-downtime");
+    if (spec.site && "patch" in spec.site && spec.site.patch) {
+        throw new UnsupportedCapabilityError("site.patch");
+    }
+    for (const migration of spec.database?.migrations ?? []) {
+        if (migration.sql_ref)
+            throw new UnsupportedCapabilityError("database.migrations.sql_ref");
+        if (!migration.sql) {
+            throw new ApplyInvariantError("migration_sql_required", `Migration ${migration.id} must include inline SQL.`);
+        }
+        verifyMigrationChecksum(migration);
+    }
+    for (const route of spec.routes?.replace ?? []) {
+        if (route.target.type !== "static") {
+            throw new UnsupportedCapabilityError("functions.node");
+        }
+    }
+}
+function releaseBaseTarget(spec) {
+    if (!spec.base)
+        return "current";
+    if ("release_id" in spec.base)
+        return { release_id: spec.base.release_id };
+    return spec.base.release;
+}
+async function verifyStaticContent(ports, projectId, release) {
+    for (const entry of release.site.paths) {
+        const present = await ports.content.hasContent(projectId, entry.content_sha256);
+        if (!present) {
+            throw new ApplyInvariantError("content_digest_missing", `Static content ${entry.content_sha256} has not been staged for project ${projectId}.`);
+        }
+    }
+}
+async function applyMigrations(ports, spec) {
+    for (const migration of spec.database?.migrations ?? []) {
+        const observed = await ports.migrations.check(spec.project, migration.id);
+        const checksum = migration.checksum.toLowerCase();
+        if (observed.state === "present") {
+            if (observed.checksum_hex.toLowerCase() !== checksum) {
+                throw new ApplyInvariantError("migration_checksum_conflict", `Migration ${migration.id} was already applied with a different checksum.`);
+            }
+            continue;
+        }
+        await ports.migrations.applyInline({
+            projectId: spec.project,
+            schema: `project_${spec.project.slice("prj_".length)}`,
+            migrationId: migration.id,
+            checksum_hex: checksum,
+            sql: migration.sql ?? "",
+            transaction: migration.transaction === "none" ? "none" : "default",
+        });
+    }
+}
+function verifyMigrationChecksum(migration) {
+    const expected = migration.checksum.toLowerCase();
+    const actual = sha256Hex(migration.sql ?? "");
+    if (actual !== expected) {
+        throw new ApplyInvariantError("migration_checksum_mismatch", `Migration ${migration.id} checksum does not match its inline SQL.`);
+    }
+}
+export function verifyContentRefBytes(ref, bytes) {
+    if (bytes.byteLength !== ref.size) {
+        throw new ApplyInvariantError("content_size_mismatch", "Content bytes do not match the declared size.");
+    }
+    if (sha256Hex(bytes) !== ref.sha256.toLowerCase()) {
+        throw new ApplyInvariantError("content_digest_mismatch", "Content bytes do not match the declared SHA-256 digest.");
+    }
+}
+export function releaseIdFromDigest(digest) {
+    const suffix = digest.split(":").at(-1) ?? digest;
+    return `rel_${suffix.slice(0, 24)}`;
+}
+function publicPlan(plan) {
+    return {
+        plan_id: plan.plan_id,
+        project_id: plan.project_id,
+        release_spec_digest: plan.release_spec_digest,
+        base_release_id: plan.base_release_id,
+        target_release_id: plan.target_release_id,
+        target_release_digest: plan.target_release_digest,
+        noop: plan.noop,
+        status: plan.status,
+        created_at: plan.created_at,
+    };
+}
+function sha256Hex(input) {
+    return createHash("sha256").update(input).digest("hex");
+}
+export function emptyCoreReleaseState() {
+    return emptyPortableReleaseState();
+}
+//# sourceMappingURL=apply.js.map

package/dist/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../src/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kBAAkB,EAClB,gBAAgB,GAKjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAmBlD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAGvB;IAFZ,MAAM,GAAG,GAAG,CAAC;IAEtB,YAAqB,IAAY,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA0B;IAI/D,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAyB,EACzB,KAA2B;IAE3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,kCAAkC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,KAAK;KACzB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC,OAAO;QACxB,IAAI;QACJ,mBAAmB,EAAE,iBAAiB;QACtC,eAAe,EAAE,IAAI,CAAC,UAAU;QAChC,iBAAiB,EAAE,eAAe;QAClC,qBAAqB,EAAE,YAAY;QACnC,cAAc,EAAE,MAAM;QACtB,IAAI,EAAE,YAAY,KAAK,UAAU;KAClC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAyB,EACzB,KAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,qCAAqC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACxF,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,EAAE,gDAAgD,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,iBAAiB;YAClC,cAAc,EAAE,IAAI,CAAC,qBAAqB;YAC1C,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;SACzC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAAC,YAAY,EAAE,+DAA+D,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACpC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI,CAAC,iBAAiB;QACjC,MAAM,EAAE,IAAI,CAAC,qBAAqB;QAClC,OAAO,EAAE,IAAI,CAAC,cAAc;QAC5B,qBAAqB,EAAE,IAAI,CAAC,eAAe;KAC5C,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE9C,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,iBAAiB;QAClC,cAAc,EAAE,IAAI,CAAC,qBAAqB;QAC1C,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAiB;IAC9C,IAAI,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,0BAA0B,CAAC,cAAc,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ,EAAE,aAAa;QAAE,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACzD,MAAM,IAAI,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;QACxD,IAAI,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,0BAA0B,CAAC,6BAA6B,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,aAAa,SAAS,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAChH,CAAC;QACD,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAiB;IAC1C,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,YAAY,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAyB,EACzB,SAAiB,EACjB,OAA6B;IAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,EACxB,kBAAkB,KAAK,CAAC,cAAc,oCAAoC,SAAS,GAAG,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAyB,EAAE,IAAiB;IACzE,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,EAC7B,aAAa,SAAS,CAAC,EAAE,iDAAiD,CAC3E,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,OAAO;YACvB,MAAM,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACtD,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,YAAY,EAAE,QAAQ;YACtB,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAwB;IACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,EAC7B,aAAa,SAAS,CAAC,EAAE,0CAA0C,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAkB,EAAE,KAAiB;IACzE,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,yDAAyD,CAAC,CAAC;IACtH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAClD,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,IAAmB;IACrC,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAA0B;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,yBAAyB,EAAE,CAAC;AACrC,CAAC"}

package/dist/capabilities.d.ts

@@ -0,0 +1,29 @@
+import { PLANNER_SEMANTICS_VERSION, RELEASE_SPEC_VERSION } from "@run402/release";
+export declare const RUNTIME_KERNEL_CONTRACT_VERSION: "run402-runtime-kernel-v1";
+export declare const RUNTIME_KERNEL_PACKAGE_NAME: "@run402/runtime-kernel";
+export declare const SUPPORTED_RUNTIME_FEATURES: readonly ["projects.create.local", "projects.inspect.local", "apply.plan.supported-static-rest-slice", "apply.commit.supported-static-rest-slice", "database.migrations.inline-sql", "database.rest.postgrest", "auth.jwt.local-test-tokens", "rls.claim-mapping", "site.static.explicit-public-paths"];
+export declare const UNSUPPORTED_RUNTIME_FEATURES: readonly ["database.migrations.sql_ref", "site.patch", "functions.node", "astro.ssr", "storage.user-api", "storage.s3-compatible", "assets.images", "subdomains.managed", "domains.custom", "export.project-archive", "import.project-archive", "cloud-import.project-archive", "auth.hosted-oauth", "cloud.billing", "cloud.fleet-scheduling", "cloud.managed-backups", "cloud.monitoring", "cloud.abuse-controls"];
+export interface UnsupportedRuntimeFeature {
+    feature: (typeof UNSUPPORTED_RUNTIME_FEATURES)[number];
+    error: "unsupported_capability";
+}
+export interface RuntimeCapabilityDocument {
+    runtime_contract_version: typeof RUNTIME_KERNEL_CONTRACT_VERSION;
+    release_spec_version: typeof RELEASE_SPEC_VERSION;
+    planner_semantics_version: typeof PLANNER_SEMANTICS_VERSION;
+    supported_features: Array<(typeof SUPPORTED_RUNTIME_FEATURES)[number]>;
+    unsupported_features: UnsupportedRuntimeFeature[];
+    components: {
+        runtime_kernel: {
+            name: typeof RUNTIME_KERNEL_PACKAGE_NAME;
+            version: string;
+        };
+        release: {
+            name: "@run402/release";
+            release_spec_version: typeof RELEASE_SPEC_VERSION;
+            planner_semantics_version: typeof PLANNER_SEMANTICS_VERSION;
+        };
+    };
+}
+export declare function runtimeCapabilities(version?: string): RuntimeCapabilityDocument;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EAErB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,+BAA+B,EAAG,0BAAmC,CAAC;AACnF,eAAO,MAAM,2BAA2B,EAAG,wBAAiC,CAAC;AAE7E,eAAO,MAAM,0BAA0B,ySAU7B,CAAC;AAEX,eAAO,MAAM,4BAA4B,sZAmB/B,CAAC;AAEX,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;IACvD,KAAK,EAAE,wBAAwB,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,wBAAwB,EAAE,OAAO,+BAA+B,CAAC;IACjE,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,yBAAyB,EAAE,OAAO,yBAAyB,CAAC;IAC5D,kBAAkB,EAAE,KAAK,CAAC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,oBAAoB,EAAE,yBAAyB,EAAE,CAAC;IAClD,UAAU,EAAE;QACV,cAAc,EAAE;YACd,IAAI,EAAE,OAAO,2BAA2B,CAAC;YACzC,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,OAAO,EAAE;YACP,IAAI,EAAE,iBAAiB,CAAC;YACxB,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;YAClD,yBAAyB,EAAE,OAAO,yBAAyB,CAAC;SAC7D,CAAC;KACH,CAAC;CACH;AAED,wBAAgB,mBAAmB,CAAC,OAAO,SAAU,GAAG,yBAAyB,CAuBhF"}

package/dist/capabilities.js

@@ -0,0 +1,59 @@
+import { PLANNER_SEMANTICS_VERSION, RELEASE_SPEC_VERSION, releasePackageInfo, } from "@run402/release";
+export const RUNTIME_KERNEL_CONTRACT_VERSION = "run402-runtime-kernel-v1";
+export const RUNTIME_KERNEL_PACKAGE_NAME = "@run402/runtime-kernel";
+export const SUPPORTED_RUNTIME_FEATURES = [
+    "projects.create.local",
+    "projects.inspect.local",
+    "apply.plan.supported-static-rest-slice",
+    "apply.commit.supported-static-rest-slice",
+    "database.migrations.inline-sql",
+    "database.rest.postgrest",
+    "auth.jwt.local-test-tokens",
+    "rls.claim-mapping",
+    "site.static.explicit-public-paths",
+];
+export const UNSUPPORTED_RUNTIME_FEATURES = [
+    "database.migrations.sql_ref",
+    "site.patch",
+    "functions.node",
+    "astro.ssr",
+    "storage.user-api",
+    "storage.s3-compatible",
+    "assets.images",
+    "subdomains.managed",
+    "domains.custom",
+    "export.project-archive",
+    "import.project-archive",
+    "cloud-import.project-archive",
+    "auth.hosted-oauth",
+    "cloud.billing",
+    "cloud.fleet-scheduling",
+    "cloud.managed-backups",
+    "cloud.monitoring",
+    "cloud.abuse-controls",
+];
+export function runtimeCapabilities(version = "0.1.0") {
+    const release = releasePackageInfo();
+    return {
+        runtime_contract_version: RUNTIME_KERNEL_CONTRACT_VERSION,
+        release_spec_version: RELEASE_SPEC_VERSION,
+        planner_semantics_version: PLANNER_SEMANTICS_VERSION,
+        supported_features: [...SUPPORTED_RUNTIME_FEATURES],
+        unsupported_features: UNSUPPORTED_RUNTIME_FEATURES.map((feature) => ({
+            feature,
+            error: "unsupported_capability",
+        })),
+        components: {
+            runtime_kernel: {
+                name: RUNTIME_KERNEL_PACKAGE_NAME,
+                version,
+            },
+            release: {
+                name: release.packageName,
+                release_spec_version: release.releaseSpecVersion,
+                planner_semantics_version: release.plannerSemanticsVersion,
+            },
+        },
+    };
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAAmC,CAAC;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAiC,CAAC;AAE7E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,uBAAuB;IACvB,wBAAwB;IACxB,wCAAwC;IACxC,0CAA0C;IAC1C,gCAAgC;IAChC,yBAAyB;IACzB,4BAA4B;IAC5B,mBAAmB;IACnB,mCAAmC;CAC3B,CAAC;AAEX,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,6BAA6B;IAC7B,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,kBAAkB;IAClB,uBAAuB;IACvB,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,wBAAwB;IACxB,wBAAwB;IACxB,8BAA8B;IAC9B,mBAAmB;IACnB,eAAe;IACf,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,sBAAsB;CACd,CAAC;AA0BX,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAG,OAAO;IACnD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,OAAO;QACL,wBAAwB,EAAE,+BAA+B;QACzD,oBAAoB,EAAE,oBAAoB;QAC1C,yBAAyB,EAAE,yBAAyB;QACpD,kBAAkB,EAAE,CAAC,GAAG,0BAA0B,CAAC;QACnD,oBAAoB,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACnE,OAAO;YACP,KAAK,EAAE,wBAAwB;SAChC,CAAC,CAAC;QACH,UAAU,EAAE;YACV,cAAc,EAAE;gBACd,IAAI,EAAE,2BAA2B;gBACjC,OAAO;aACR;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,WAAW;gBACzB,oBAAoB,EAAE,OAAO,CAAC,kBAAkB;gBAChD,yBAAyB,EAAE,OAAO,CAAC,uBAAuB;aAC3D;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,16 @@
+export interface UnsupportedCapabilityDetails {
+    capability: string;
+    supported_features?: string[];
+}
+export declare class UnsupportedCapabilityError extends Error {
+    readonly code = "unsupported_capability";
+    readonly status = 422;
+    readonly details: UnsupportedCapabilityDetails;
+    constructor(capability: string, message?: string);
+}
+export declare function unsupportedCapabilityEnvelope(error: UnsupportedCapabilityError): {
+    error: "unsupported_capability";
+    message: string;
+    capability: string;
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,4BAA4B;IACzC,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;gBAEnC,UAAU,EAAE,MAAM,EAAE,OAAO,SAAkD;CAK1F;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,0BAA0B,GAAG;IAChF,KAAK,EAAE,wBAAwB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAMA"}

package/dist/errors.js

@@ -0,0 +1,18 @@
+export class UnsupportedCapabilityError extends Error {
+    code = "unsupported_capability";
+    status = 422;
+    details;
+    constructor(capability, message = `Unsupported runtime capability: ${capability}`) {
+        super(message);
+        this.name = "UnsupportedCapabilityError";
+        this.details = { capability };
+    }
+}
+export function unsupportedCapabilityEnvelope(error) {
+    return {
+        error: "unsupported_capability",
+        message: error.message,
+        capability: error.details.capability,
+    };
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,GAAG,wBAAwB,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC;IACb,OAAO,CAA+B;IAE/C,YAAY,UAAkB,EAAE,OAAO,GAAG,mCAAmC,UAAU,EAAE;QACvF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAiC;IAK7E,OAAO;QACL,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;KACrC,CAAC;AACJ,CAAC"}

package/dist/health.d.ts

@@ -0,0 +1,10 @@
+import { type RuntimeCapabilityDocument } from "./capabilities.js";
+export interface RuntimeKernelHealth {
+    status: "ok";
+    mode: "core";
+    runtime_contract_version: RuntimeCapabilityDocument["runtime_contract_version"];
+    supported_features: number;
+    unsupported_features: number;
+}
+export declare function runtimeHealth(capabilities?: RuntimeCapabilityDocument): RuntimeKernelHealth;
+//# sourceMappingURL=health.d.ts.map

package/dist/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../src/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAExF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,IAAI,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB,EAAE,yBAAyB,CAAC,0BAA0B,CAAC,CAAC;IAChF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,aAAa,CAAC,YAAY,4BAAwB,GAAG,mBAAmB,CAQvF"}

package/dist/health.js

@@ -0,0 +1,11 @@
+import { runtimeCapabilities } from "./capabilities.js";
+export function runtimeHealth(capabilities = runtimeCapabilities()) {
+    return {
+        status: "ok",
+        mode: "core",
+        runtime_contract_version: capabilities.runtime_contract_version,
+        supported_features: capabilities.supported_features.length,
+        unsupported_features: capabilities.unsupported_features.length,
+    };
+}
+//# sourceMappingURL=health.js.map

package/dist/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../src/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAkC,MAAM,mBAAmB,CAAC;AAUxF,MAAM,UAAU,aAAa,CAAC,YAAY,GAAG,mBAAmB,EAAE;IAChE,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,MAAM;QACZ,wBAAwB,EAAE,YAAY,CAAC,wBAAwB;QAC/D,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,CAAC,MAAM;QAC1D,oBAAoB,EAAE,YAAY,CAAC,oBAAoB,CAAC,MAAM;KAC/D,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./apply.js";
+export * from "./capabilities.js";
+export * from "./errors.js";
+export * from "./health.js";
+export * from "./ports.js";
+export * from "./projects.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from "./apply.js";
+export * from "./capabilities.js";
+export * from "./errors.js";
+export * from "./health.js";
+export * from "./ports.js";
+export * from "./projects.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC"}

package/dist/ports.d.ts

@@ -0,0 +1,93 @@
+import type { PortableReleaseState } from "@run402/release";
+import type { RuntimeCapabilityDocument } from "./capabilities.js";
+export interface CoreProject {
+    project_id: string;
+    schema_slot: string;
+    public_id: string;
+    anon_key: string;
+    service_key: string;
+    endpoints: {
+        rest_url: string;
+        static_base_url: string;
+    };
+    active_release_id: string | null;
+    capabilities: RuntimeCapabilityDocument;
+}
+export interface ProjectCatalogPort {
+    create(input: {
+        name: string;
+    }): Promise<CoreProject>;
+    inspect(projectId: string): Promise<CoreProject | null>;
+}
+export interface ReleaseStatePort {
+    getBase(projectId: string, target: "empty" | "current" | {
+        release_id: string;
+    }): Promise<{
+        release_id: string | null;
+        state: PortableReleaseState;
+    }>;
+    setActiveRelease(input: {
+        projectId: string;
+        releaseId: string;
+        digest: string;
+        release: PortableReleaseState;
+        expectedBaseReleaseId: string | null;
+    }): Promise<void>;
+}
+export interface CoreApplyPlan {
+    plan_id: string;
+    project_id: string;
+    release_spec_digest: string;
+    base_release_id: string | null;
+    target_release_id: string;
+    target_release_digest: string;
+    noop: boolean;
+    status: "planned" | "committed";
+    created_at: string;
+}
+export interface StoredCoreApplyPlan extends CoreApplyPlan {
+    spec: unknown;
+    target_release: PortableReleaseState;
+}
+export interface ApplyPlanStorePort {
+    create(input: Omit<StoredCoreApplyPlan, "plan_id" | "created_at" | "status">): Promise<StoredCoreApplyPlan>;
+    get(planId: string): Promise<StoredCoreApplyPlan | null>;
+    markCommitted(planId: string): Promise<void>;
+}
+export interface ContentStorePort {
+    putStatic(input: {
+        projectId: string;
+        sha256: string;
+        bytes: Uint8Array;
+        contentType: string;
+    }): Promise<void>;
+    hasContent(projectId: string, sha256: string): Promise<boolean>;
+    readStatic(projectId: string, sha256: string): Promise<{
+        bytes: Uint8Array;
+        contentType: string;
+    } | null>;
+}
+export interface MigrationPort {
+    check(projectId: string, migrationId: string): Promise<{
+        state: "absent";
+    } | {
+        state: "present";
+        checksum_hex: string;
+    }>;
+    applyInline(input: {
+        projectId: string;
+        schema: string;
+        migrationId: string;
+        checksum_hex: string;
+        sql: string;
+        transaction: "default" | "none";
+    }): Promise<void>;
+}
+export interface RuntimeKernelPorts {
+    projects: ProjectCatalogPort;
+    releases: ReleaseStatePort;
+    plans: ApplyPlanStorePort;
+    content: ContentStorePort;
+    migrations: MigrationPort;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,yBAAyB,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACxF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,EAAE,oBAAoB,CAAC;KAC7B,CAAC,CAAC;IACH,gBAAgB,CAAC,KAAK,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,oBAAoB,CAAC;QAC9B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;KACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,IAAI,EAAE,OAAO,CAAC;IACd,cAAc,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5G,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACzD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,KAAK,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,UAAU,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CAC3G;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAClD;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,GACnB;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAC7C,CAAC;IACF,WAAW,CAAC,KAAK,EAAE;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,aAAa,CAAC;CAC3B"}

package/dist/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":""}

package/dist/projects.d.ts

@@ -0,0 +1,23 @@
+import type { CoreProject, RuntimeKernelPorts } from "./ports.js";
+export interface CreateCoreProjectInput {
+    name?: string | null;
+}
+export interface InspectCoreProjectInput {
+    project_id: string;
+}
+export declare class ProjectNotFoundError extends Error {
+    readonly projectId: string;
+    readonly code = "project_not_found";
+    readonly status = 404;
+    constructor(projectId: string);
+}
+export declare function normalizeProjectName(input: CreateCoreProjectInput): string;
+export declare function validateProjectId(projectId: string): string;
+export declare function createCoreProject(ports: Pick<RuntimeKernelPorts, "projects">, input: CreateCoreProjectInput): Promise<CoreProject>;
+export declare function inspectCoreProject(ports: Pick<RuntimeKernelPorts, "projects">, input: InspectCoreProjectInput): Promise<CoreProject>;
+export declare function projectNotFoundEnvelope(error: ProjectNotFoundError): {
+    error: "project_not_found";
+    message: string;
+    project_id: string;
+};
+//# sourceMappingURL=projects.d.ts.map

package/dist/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../src/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAIjC,QAAQ,CAAC,SAAS,EAAE,MAAM;IAHtC,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,MAAM,OAAO;gBAED,SAAS,EAAE,MAAM;CAIvC;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAS1E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAK3D;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,EAC3C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,EAC3C,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,WAAW,CAAC,CAMtB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,oBAAoB,GAAG;IACpE,KAAK,EAAE,mBAAmB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAMA"}

package/dist/projects.js

@@ -0,0 +1,44 @@
+export class ProjectNotFoundError extends Error {
+    projectId;
+    code = "project_not_found";
+    status = 404;
+    constructor(projectId) {
+        super(`Run402 Core project not found: ${projectId}`);
+        this.projectId = projectId;
+        this.name = "ProjectNotFoundError";
+    }
+}
+export function normalizeProjectName(input) {
+    const name = input.name?.trim();
+    if (!name) {
+        return "local-project";
+    }
+    if (name.length > 120) {
+        throw new RangeError("Project name must be 120 characters or less.");
+    }
+    return name;
+}
+export function validateProjectId(projectId) {
+    if (!/^prj_[a-z0-9]{16}$/.test(projectId)) {
+        throw new RangeError("Project id must match prj_[a-z0-9]{16}.");
+    }
+    return projectId;
+}
+export async function createCoreProject(ports, input) {
+    return ports.projects.create({ name: normalizeProjectName(input) });
+}
+export async function inspectCoreProject(ports, input) {
+    const project = await ports.projects.inspect(validateProjectId(input.project_id));
+    if (!project) {
+        throw new ProjectNotFoundError(input.project_id);
+    }
+    return project;
+}
+export function projectNotFoundEnvelope(error) {
+    return {
+        error: error.code,
+        message: error.message,
+        project_id: error.projectId,
+    };
+}
+//# sourceMappingURL=projects.js.map

package/dist/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../src/projects.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAIxB;IAHZ,IAAI,GAAG,mBAAmB,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC;IAEtB,YAAqB,SAAiB;QACpC,KAAK,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAC;QADlC,cAAS,GAAT,SAAS,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA6B;IAChE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,yCAAyC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA2C,EAC3C,KAA6B;IAE7B,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA2C,EAC3C,KAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAA2B;IAKjE,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@run402/runtime-kernel",
+  "version": "0.1.0",
+  "description": "Public Run402 Core runtime kernel contracts, capabilities, and application services.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "lint": "tsc --noEmit",
+    "test": "node --test --import tsx 'src/**/*.test.ts'"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@run402/release": "0.1.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kychee-com/run402-core.git",
+    "directory": "packages/runtime-kernel"
+  },
+  "homepage": "https://run402.com",
+  "bugs": "https://github.com/kychee-com/run402-core/issues",
+  "author": "Kychee Technologies",
+  "license": "Apache-2.0",
+  "keywords": [
+    "run402",
+    "core",
+    "runtime",
+    "postgres",
+    "postgrest",
+    "ai-agent"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}