# @lssm-tech/integration.lssm-os-provider-vercel

Vercel provider adapter for governed LSSM OS infrastructure execution.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.5`
- Package path: `packages/integrations/lssm-os-provider-vercel`
- Manifest path: `packages/integrations/lssm-os-provider-vercel/package.json`
- Manifest Git blob: `a932c9183d00d9dda35a4cc57efc78cd7d11106d`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/integration.lssm-os-provider-vercel](https://lssm.co/docs/packages/integration.lssm-os-provider-vercel/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.lssm-os-provider-vercel.txt)

## Package metadata

```json
{
  "layer": "integrations",
  "physicalArea": null,
  "primaryArea": "delivery-and-infrastructure",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "integrations",
    "catalogKind": "integration",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Delivery, infrastructure and runtime operations](https://lssm.co/docs/areas/delivery-and-infrastructure/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/integrations/lssm-os-provider-vercel/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/README.md",
  "blobSha": "7733675f5838a38cdb97785786089711136bb153",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# Vercel provider for LSSM OS

This package implements the authoritative LSSM OS `ProviderExecutionPort`
over injected Vercel I/O. It makes no network calls and resolves no credentials.
An adapter instance exclusively owns either `provider_api` resources or
`provider_native_config` project configuration.

The `./runtime-node` export directly implements `ProviderLifecyclePortV1`. It
accepts only closed, secret-free, digest-bound Vercel V2 commands, reserves the
exact execution fence before mutation, persists an exact V2 receipt, and
replays only independently verified durable receipts. It never loads or calls
the legacy `ProviderExecutionPort`; that older adapter remains a compatibility
surface outside Agent Host production routing.

Runtime Node dependencies are injected Vercel command I/O plus durable
reservation and receipt state. Timeout aborts move attempted mutations into
indeterminate custody, where redelivery cannot repeat the provider effect.
Offline qualification proves 100-way contention, exact replay, command/result
substitution rejection, and hostile timeout containment. Credentialed Vercel
canary and 24-hour observation evidence remain required for live support.

The offline v0 surface discovers/imports projects, environments, deployments,
domains, functions, environment-variable references, usage, billing, status,
rollback, and promotion records. Discovery requires terminal cursor evidence for every
family (including empty families) and enforces page and record bounds.

Execution uses one absolute deadline and trusted clock. A durable atomic state
port owns lease expiry/takeover, operation replay, reconciliation state, and
resource high-water fences. Receipts bind the exact plan, effect, authorization
decision and attestation, provider result/observation, usage, evidence, and
fence. A lease must outlive the absolute deadline plus a safety margin.
Noncooperative timeouts remain indeterminate until trusted reconciliation proves
a late effect or terminal post-deadline absence.
The offline conformance target performs reconciliation through the injected
read-only oracle observation boundary; it never replays a mutation to infer
provider state.
Concurrent operation keys for one resource scope are excluded. A higher fence
must durably settle and quarantine every superseded provider attempt before its
effect may run; stale failures are receipted only after verified provider
absence and atomic persistence.
Before any port call, execution recomputes the canonical runtime-plan digest
and requires the input step to be the unique exact plan member bound to the
same change, resource, and action.

Only opaque Vercel credential and secret references may cross the boundary.
Credential, secret, and webhook-signature references use one canonical
lowercase path spelling; aliases, encoded paths, dot segments, empty segments,
and trailing separators are rejected.
Successful deployment and domain mutations require ready and verified provider
observations. Rollback and promotion use dedicated driver methods and require
exact trusted pre/post observations. Compensation requires matching durable
operation and receipt indexes, verified receipt/evidence semantics, and an
exact expected prior observation bound to the current scope and authorization.
Every driver return crosses a closed-world runtime validator before independent
verification or durable state. Unknown fields and secret-like credential or
variable material fail closed; `credentialRefs` must contain only canonical
`credential://vercel/...` references, and env discovery exposes references and
target metadata only.
Durable step records are an exact succeeded/failed XOR: success contains only
its mutation observation, while failure contains only its verified absence
resolution. Contradictory or fully reattested mixed records fail verification.
Verification recursively decodes receipt, observation, economic evidence, and
failure resolution into fresh closed values before semantic or evidence checks;
unknown nested authority and noncanonical timestamps fail closed.

`projectVerifiedVercelTopologyReceipt` is the narrow bridge into Integration
Hub topology evidence. It projects a secret-free receipt only after both the
generic execution/receipt binding and Vercel's durable provider verifier pass.
The authorized plan and desired properties must bind the exact tenant,
workspace, environment, integration, connection, topology digest, and provider
account reference. Cross-connection, noncanonical digest, failed, or
unrecoverable receipts are rejected.
Cleanup accepts only handles bound to the failed current step. Webhooks accept
only canonical `signature://vercel/...` references, then require injected
signature verification followed by atomic durable replay reservation.

Billing and usage are strictly `actual`, `estimated`, or `unavailable`;
estimates require methodology evidence, unavailable claims require a reason,
and contradictory discriminants fail closed. Discovery applies the same strict
positive quantities/amounts, ISO currency, and real calendar validation.
The `./testing` export provides sanitized fakes and fixtures. The
`./conformance` export is an offline target only and makes no live Vercel
qualification claim.

Run `bun run lint:check`, `bun run typecheck`, `bun test`, and
`bun run pack:verify` before handoff. Pack verification stages installable
semver dependency ranges, extracts the real npm tarball, installs it with npm,
and imports every public entry under Node and Bun in a clean consumer.

Vercel discovery names remain source-compatible aliases of the shared `lib.lssm-os-runtime/ports` resource/page/scope contracts. `VercelProviderDriver` extends the shared discovery port; execution, fencing, evidence and provider validation remain unchanged.


## Declared capabilities

### Integration Lssm Os Provider Vercel

Capability ID: `package.lssm.tech.integration.lssm.os.provider.vercel`

Vercel provider adapter for governed LSSM OS infrastructure execution.

Use cases:

- Adopt vercel provider adapter for governed lssm os infrastructure execution

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "bun",
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/integration.lssm-os-provider-vercel package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "integration",
    "lssm",
    "provider",
    "vercel"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/integration.lssm-os-provider-vercel",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.lssm-os-provider-vercel/conformance",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.lssm-os-provider-vercel/runtime-node",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.lssm-os-provider-vercel/testing",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "integrations",
  "kind": "integration",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "bun",
    "node"
  ],
  "entrypoints": [
    ".",
    "./conformance",
    "./runtime-node",
    "./testing"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.integration.lssm.os.provider.vercel",
    "from": "@lssm-tech/integration.lssm-os-provider-vercel",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.lssm.os.provider.vercel",
    "from": "@lssm-tech/integration.lssm-os-provider-vercel/conformance",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.lssm.os.provider.vercel",
    "from": "@lssm-tech/integration.lssm-os-provider-vercel/runtime-node",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.lssm.os.provider.vercel",
    "from": "@lssm-tech/integration.lssm-os-provider-vercel/testing",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/integration.lssm-os-provider-vercel` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/src/index.ts); verified source file.

- `@lssm-tech/integration.lssm-os-provider-vercel/conformance` — subpath `./conformance`
  - `unconditional`: `./src/conformance.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/src/conformance.ts); verified source file.

- `@lssm-tech/integration.lssm-os-provider-vercel/runtime-node` — subpath `./runtime-node`
  - `unconditional`: `./src/runtime-node.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/src/runtime-node.ts); verified source file.

- `@lssm-tech/integration.lssm-os-provider-vercel/testing` — subpath `./testing`
  - `unconditional`: `./src/testing.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/lssm-os-provider-vercel/src/testing.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "!dist/**/*.test.*",
    "README.md",
    "evidence"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./conformance": {
      "types": "./dist/conformance.d.ts",
      "bun": "./dist/conformance.js",
      "node": "./dist/node/conformance.js",
      "default": "./dist/conformance.js"
    },
    "./runtime-node": {
      "types": "./dist/runtime-node.d.ts",
      "bun": "./dist/runtime-node.js",
      "node": "./dist/node/runtime-node.js",
      "default": "./dist/runtime-node.js"
    },
    "./testing": {
      "types": "./dist/testing.d.ts",
      "bun": "./dist/testing.js",
      "node": "./dist/node/testing.js",
      "default": "./dist/testing.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.lssm-os-provider-conformance](https://lssm.co/docs/packages/lib.lssm-os-provider-conformance/): `workspace:^`
- [@lssm-tech/lib.lssm-os-runtime](https://lssm.co/docs/packages/lib.lssm-os-runtime/): `workspace:^`
- [@lssm-tech/lib.orchestration-spec](https://lssm.co/docs/packages/lib.orchestration-spec/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@types/bun`: `catalog:types`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "bun run build:bundle && bun run build:published && bun run build:types",
  "build:bundle": "contractspec-bun-build transpile",
  "build:published": "bun build src/index.ts src/conformance.ts src/runtime-node.ts src/testing.ts --outdir dist --target bun --packages bundle --minify && bun build src/index.ts src/conformance.ts src/runtime-node.ts src/testing.ts --outdir dist/node --target node --packages bundle --minify",
  "build:types": "contractspec-bun-build types",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "pack:verify": "bun run build && bun scripts/verify-published-targets.ts",
  "test": "bun test",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Integration Lssm Os Provider Vercel documentation](https://www.npmjs.com/package/%40lssm-tech%2Fintegration.lssm-os-provider-vercel) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fintegration.lssm-os-provider-vercel",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/integration.lssm-os-provider-vercel.txt",
  "route": "/llms/integration.lssm-os-provider-vercel",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.lssm-os-provider-vercel.txt",
  "blobSha": "7733675f5838a38cdb97785786089711136bb153",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```