# @lssm-tech/integration.lssm-os-ingress-mqtt

Authenticated MQTT publication normalization into the LSSM OS durable inbox.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.4`
- Package path: `packages/integrations/lssm-os-ingress-mqtt`
- Manifest path: `packages/integrations/lssm-os-ingress-mqtt/package.json`
- Manifest Git blob: `cb8080b598ef1280437869ae0055bb6c726dd63f`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/integration.lssm-os-ingress-mqtt](https://lssm.co/docs/packages/integration.lssm-os-ingress-mqtt/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.lssm-os-ingress-mqtt.txt)

## Package metadata

```json
{
  "layer": "integrations",
  "physicalArea": null,
  "primaryArea": "delivery-and-infrastructure",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "integrations",
    "catalogKind": "integration",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Delivery, infrastructure and runtime operations](https://lssm.co/docs/areas/delivery-and-infrastructure/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/integrations/lssm-os-ingress-mqtt/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/README.md",
  "blobSha": "4908ca5256793561c97e64e7924508a242d69af3",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# LSSM OS MQTT ingress

This package accepts qualified MQTT 3.1.1/5.0 publications and normalizes them
through an injected trusted normalizer into the durable LSSM OS inbox. MQTT is
never a work queue or execution-authority source. Topic scope, QoS, session,
expiry, authentication reference, payload bounds, and exact broker capability
are validated before durable admission. Business execution still requires the
ordinary Runtime Node operation, Connect decision, work order, claim, and fence.

Production composition uses `createMqttIngressBrokerV2`. It binds the MQTT
transport profile separately from the authoritative durable-queue profile,
requires both components to share exact scope/topology/generation, and accepts
only a source-digest-bound durable admission receipt. The additive
`createDurableQueueIngressV1` runtime helper derives the outbox identity from
the immutable publication digest and admits through the existing Durable Queue
V2 port. PostgreSQL can therefore remain the complete queue and inbox authority
while MQTT supplies only authenticated ingress.

`createMqttIngressBrokerV1` remains available as a compatibility-only
single-binding constructor. New deployments should not use it to claim an
independently qualified MQTT transport and SQL durability component.


## Declared capabilities

### Authenticated MQTT ingress

Capability ID: `lssm-os.ingress.mqtt`

Validate and normalize qualified MQTT publications into the durable LSSM OS inbox without granting MQTT work-queue or execution authority.

Use cases:

- Admit MQTT 3.1.1 or 5.0 publications through a trusted normalizer
- Enforce topic, QoS, session, expiry, authentication, payload, and broker capability policy before durable admission

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "bun",
    "node"
  ],
  "avoidWhen": [
    "MQTT publications are expected to bypass ordinary operation, Connect, work-order, claim, or fence authority.",
    "The broker and topic binding cannot be qualified exactly or payload bounds cannot be enforced before admission."
  ],
  "requires": [
    "MQTT broker adapter",
    "trusted normalizer",
    "LSSM OS durable inbox"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "MQTT",
    "IoT ingress",
    "durable inbox"
  ],
  "pythonEquivalents": [
    "paho-mqtt ingress adapter"
  ],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 65
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/integration.lssm-os-ingress-mqtt",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "integrations",
  "kind": "integration",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "bun",
    "node"
  ],
  "entrypoints": [
    "."
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "lssm-os.ingress.mqtt",
    "from": "@lssm-tech/integration.lssm-os-ingress-mqtt",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/integration.lssm-os-ingress-mqtt` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/index.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/adapter` — subpath `./adapter`
  - `unconditional`: `./src/adapter.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/adapter.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/dependencies` — subpath `./dependencies`
  - `unconditional`: `./src/dependencies.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/dependencies.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/invoke` — subpath `./invoke`
  - `unconditional`: `./src/invoke.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/invoke.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/result` — subpath `./result`
  - `unconditional`: `./src/result.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/result.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/snapshot` — subpath `./snapshot`
  - `unconditional`: `./src/snapshot.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/snapshot.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/types` — subpath `./types`
  - `unconditional`: `./src/types.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/types.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/validation` — subpath `./validation`
  - `unconditional`: `./src/validation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/validation.ts); verified source file.

- `@lssm-tech/integration.lssm-os-ingress-mqtt/validation-publication` — subpath `./validation-publication`
  - `unconditional`: `./src/validation-publication.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-ingress-mqtt/src/validation-publication.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "!dist/**/*test*",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "browser": "./dist/browser/index.js",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./adapter": {
      "types": "./dist/adapter.d.ts",
      "browser": "./dist/browser/adapter.js",
      "bun": "./dist/adapter.js",
      "node": "./dist/node/adapter.js",
      "default": "./dist/adapter.js"
    },
    "./dependencies": {
      "types": "./dist/dependencies.d.ts",
      "browser": "./dist/browser/dependencies.js",
      "bun": "./dist/dependencies.js",
      "node": "./dist/node/dependencies.js",
      "default": "./dist/dependencies.js"
    },
    "./invoke": {
      "types": "./dist/invoke.d.ts",
      "browser": "./dist/browser/invoke.js",
      "bun": "./dist/invoke.js",
      "node": "./dist/node/invoke.js",
      "default": "./dist/invoke.js"
    },
    "./result": {
      "types": "./dist/result.d.ts",
      "browser": "./dist/browser/result.js",
      "bun": "./dist/result.js",
      "node": "./dist/node/result.js",
      "default": "./dist/result.js"
    },
    "./snapshot": {
      "types": "./dist/snapshot.d.ts",
      "browser": "./dist/browser/snapshot.js",
      "bun": "./dist/snapshot.js",
      "node": "./dist/node/snapshot.js",
      "default": "./dist/snapshot.js"
    },
    "./types": {
      "types": "./dist/types.d.ts",
      "browser": "./dist/browser/types.js",
      "bun": "./dist/types.js",
      "node": "./dist/node/types.js",
      "default": "./dist/types.js"
    },
    "./validation": {
      "types": "./dist/validation.d.ts",
      "browser": "./dist/browser/validation.js",
      "bun": "./dist/validation.js",
      "node": "./dist/node/validation.js",
      "default": "./dist/validation.js"
    },
    "./validation-publication": {
      "types": "./dist/validation-publication.d.ts",
      "browser": "./dist/browser/validation-publication.js",
      "bun": "./dist/validation-publication.js",
      "node": "./dist/node/validation-publication.js",
      "default": "./dist/validation-publication.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.lssm-os-runtime](https://lssm.co/docs/packages/lib.lssm-os-runtime/): `^2.1.1`
- [@lssm-tech/lib.orchestration-spec](https://lssm.co/docs/packages/lib.orchestration-spec/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@types/bun`: `catalog:types`
- `typescript`: `^7.0.2`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "pack:verify": "bun run build && bun scripts/verify-pack.ts",
  "test": "bun test",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [LSSM OS MQTT ingress](https://www.npmjs.com/package/%40lssm-tech%2Fintegration.lssm-os-ingress-mqtt) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fintegration.lssm-os-ingress-mqtt",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/integration.lssm-os-ingress-mqtt.txt",
  "route": "/llms/integration.lssm-os-ingress-mqtt",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.lssm-os-ingress-mqtt.txt",
  "blobSha": "4908ca5256793561c97e64e7924508a242d69af3",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```