# @lssm-tech/lib.contracts-runtime-kernel

Canonical framework-neutral ContractSpec engine, ports and storage; no Forms or backend authority

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `0.1.0`
- Package path: `packages/foundation/contracts-runtime-kernel`
- Manifest path: `packages/foundation/contracts-runtime-kernel/package.json`
- Manifest Git blob: `36451b1c5043a85bd4150b68bac202932b814e7d`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/lib.contracts-runtime-kernel](https://lssm.co/docs/packages/lib.contracts-runtime-kernel/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.contracts-runtime-kernel.txt)

## Package metadata

```json
{
  "layer": "foundation",
  "physicalArea": null,
  "primaryArea": "runtime-adapters",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "runtime",
    "catalogKind": "library",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Handlers, runtimes and transports](https://lssm.co/docs/areas/runtime-adapters/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/foundation/contracts-runtime-kernel/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/README.md",
  "blobSha": "1853194c88fea01773955e29b175e1fa24b33349",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# ContractSpec runtime kernel

The existing root owns the unchanged `EventRegistry` class. Legacy `/events`
imports forward the same constructor and keep all event model and factory exports
on their canonical Core owner. Registration, duplicate errors, version lookup
and inherited filter/group behavior remain unchanged.

This canonical owner reuses the existing engine and supplied ports. No Forms/domain semantics, selected platform backend, host environment bridge, runtime authority or provider implementation enters this Foundation leaf. Legacy factory/function identity and native/browser storage conditions are preserved. Clean producer and consumer qualification remain pending.

Production declaration builds select `tsconfig.build.json`, preserving
`rootDir: src` while excluding tests and the private engine test helper.
Source typechecking retains these fixtures through the unchanged
`tsconfig.json`; production-reachable portable helpers remain included.

## Rich-reference registry and rich-content privacy

The existing root also owns the canonical reference-kind registry and subject,
kind-policy, preference and audit port declarations. Registration remains explicit;
duplicate registration and unknown-kind lookup retain their existing errors.
Compatibility imports resolve the same registry and function bindings.

The existing `@lssm-tech/lib.contracts-runtime-kernel/redaction` root also exports
the rich-content models and `redactRichSegments`, `redactRichCodeBlock`,
`redactRichDiffBlock` and `richSegmentsToText`. Redacted references retain their
existing placeholders and explanations while dropping values, links and metadata.
Authentication, policy decisions and durable audit persistence remain supplied
ports and do not become grants of action authority.

`createDenialTokenSigner` and `createSessionSalt` use the existing CryptoUtils
HMAC implementation and Web Crypto randomness through the kernel root. Caller
keys, per-request salt requirements and fail-closed verification remain unchanged.
Crypto-free `DENIAL_TOKEN_PREFIX` and `looksLikeDenialToken` shape checks remain
available through `/redaction`, alongside the original text/code/diff builders.

The root also exposes the canonical `ResourceRegistry`, resource metadata/template
types, `defineResourceTemplate`, `resourceRef` and `isResourceRef`. Resource URI
matching retains literal escaping, registration order and URI decoding behavior.
Resource resolution remains the original caller-supplied read-only callback;
registration and matching provide no authorization for executing that callback.

The existing root owns the canonical `SpecContractRegistry`, `keyOfSpecContract` and complete registry utility family. Legacy registry imports forward the same class, functions and grouping object; duplicate errors, latest-version selection, filters, defaults and insertion order remain unchanged. The five intentional package roots are unchanged.

The existing root exposes the canonical `OperationSpecRegistry` and supplied `OperationHandlerCtx` ports. Hosts retain their exact branding and translation types, and variant selection and handlers share the same context type. Legacy imports specialize this same constructor with the original product context; installer inference, protected subclass access and runtime authority guards remain intact. The executor uses private preparation and invocation modules to satisfy the package size limit. Preparation calls its typed continuation at the original guard boundary without an unconditional await, preserving handler and context-mutation onset; promise settlement and resulting-tree performance still require measurement.

The existing root owns the complete data-view filter-scope family: `resolveDataViewFilters`, `sanitizeDataViewFilterSet`, `filterSetToClauses`, `pruneDataViewFilterClauses`, `pruneDataViewFilterSet` and the two input/result interfaces. User filters override initial values even when explicitly empty; locked conflicts are pruned and locked clauses remain last. Range operators, null clauses, clone behavior and the `visible-disabled` chip default remain unchanged. Legacy leaf and barrel imports forward the same functions. Resolution supplies filter constraints and does not authorize query execution.

The existing root exposes `evaluatePredicateSpec` and `PredicateEvaluation`. The complete original evaluator uses canonical Core predicate models and preserves all comparison coercions, branch precedence, default path resolution, callback/getter errors and insertion order of accessed paths. Every child is evaluated with `children.map` before the group result is combined. Legacy imports forward this same three-argument function; the existing DecisionRuntime two-argument `evaluatePredicate` wrapper remains unchanged. Matching supplies evidence and does not grant action authority.

The existing root exposes the canonical `FeatureRegistry` and `PresentationRegistry` for caller-supplied Core contracts. Compatibility registry leaves forward these exact classes. Feature duplicate errors, filters, grouping and insertion order remain unchanged; presentation registration and latest-version lookup retain the shared nominal superclass. Registration provides no runtime effect authority.

## Entity and DataView registries

`DataViewRegistry`, `dataViewKey`, `EntityRegistry`, and `tech_contracts_entities_registry_DocBlocks` are exported from the existing Runtime Kernel root. The original implementations consume portable Core models and the canonical `SpecContractRegistry` superclass. Duplicate handling, version selection, protected storage, edge order, defaults and error text are unchanged. Supported Legacy registry paths forward the same class objects; the original compatibility tests remain unchanged. No populated catalog or UI implementation is installed by importing these registries.

The canonical `./forms/form-registry` and `./forms/projection-lookup` leaves
own the complete generic nominal form registry and projection lookup helpers
over Core form contracts. They preserve duplicate/version selection, private
map identity and all filtering/grouping behavior. They import no Forms services,
UI, host DTO, provider or persistence implementation. Historical paths forward
to the same class and functions; this ownership change grants no authority.

## Policy, rich-reference runtime, idempotency and prompt registry

- `./policy` and `./policy/<leaf>` (`context`, `engine`, `guards`, `opa-adapter`,
  `registry`, `requirements`, `spec`, `validation`) own `PolicyEngine`,
  `PolicyRegistry`, policy context/guards, the OPA adapter and policy
  validation.
- `./policy` also exports the condition grammar: `compilePolicyExpression`,
  `evaluatePolicyExpression`, `PolicyExpressionError`, `POLICY_CONDITION_ROOTS`
  and `POLICY_EXPRESSION_LIMITS`. Conditions are parsed and interpreted, never
  run with `eval` or `new Function`. A condition that cannot be parsed or
  evaluated fails closed: it applies a deny rule and never grants an allow
  rule. `validatePolicySpec` reports such conditions, and malformed specs, as
  error issues instead of throwing.
- `./rich-reference/handler`, `./rich-reference/redaction` and
  `./rich-reference/runtime[/<leaf>]` own the reference handler contract, kind
  redaction and the `ReferenceRuntime` dispatch/redaction enforcement.
- `./shared/idempotency` (Node-only `deriveIdempotencyKey`) and
  `./shared/idempotency-shape` (browser-safe shape).
- `./promptRegistry` owns `PromptRegistry` (the `PromptSpec` model lives in
  `@lssm-tech/lib.contracts-spec-core/prompt`).

Legacy `@lssm-tech/lib.contracts-spec` paths forward to these same instances.

The `./pwa/registry` entry owns `PwaAppManifestRegistry`, `comparePwaVersions`
and `getLatestPwaRelease`. It consumes portable Core PWA models and preserves
the canonical registry superclass and semantic version ordering. Historical
PWA registry exports forward to this entry; PWA update contract definitions
belong to the pure `@lssm-tech/lib.progressive-delivery/pwa` entry.

### Built-in rich-reference kinds

The `rich-reference/kinds` entry owns the existing explicit seven-kind registration
and entity resolver. The six pure kind definitions remain in Core; registration
uses the same Kernel registry and rejects duplicate ids. The `rich-reference/kinds/entity`
leaf and `rich-reference/__fixtures__/cross-adapter-fixture` preserve the existing
entity contract and adapter parity data. Imports do not populate a registry or
grant authority. Legacy contracts-spec paths forward the identical objects.

Canonical compatibility leaves: `./migrations`, `./model-registry`.
These leaves preserve the original implementations and object/class identity; legacy
ContractSpec imports forward to these owners.


## Declared capabilities

### Framework-neutral ContractSpec runtime kernel

Capability ID: `package.lssm.tech.lib.contracts.runtime.kernel`

Existing query/cache/offline engine and supplied approval, transport, reachability, storage, collaboration, redaction and event ports.

Use cases:

- Compose the portable ContractSpec engine with caller-supplied ports without Forms services or automatic backend binding.

Constraints:

```json
{
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "avoidWhen": [
    "Forms services, Observability backend binding, host environment conveniences or provider implementations are required.",
    "A storage leaf is selected outside its published browser or react-native platform condition.",
    "A supplied port is being treated as a grant of runtime authority."
  ],
  "requires": [
    "Caller-supplied ports and existing authority/principal context; platform storage facilities for the selected storage leaf."
  ]
}
```

Other capability declarations:

```json
{
  "aliases": [
    "ContractSpec runtime kernel",
    "portable query engine",
    "supplied runtime ports"
  ]
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "createOnlineOnlyDataEngine",
      "createMemoryStorage"
    ]
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/engine/events",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/redaction",
    "symbols": [
      "redactSecrets"
    ]
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/storage/async-storage",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/storage/indexeddb",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/forms/form-registry",
    "symbols": [
      "FormRegistry"
    ]
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/forms/projection-lookup",
    "symbols": [
      "findFormProjection",
      "formKey",
      "formProjectionVersion",
      "formProjectionKey",
      "formProjectionKeyForSpec"
    ]
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/context",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/engine",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/guards",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/opa-adapter",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/registry",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/requirements",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/spec",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/validation",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/dev-invariants",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/dispatch",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/redaction-enforcer",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/runtime",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/handler",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/redaction",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/shared/idempotency",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/shared/idempotency-shape",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/promptRegistry",
    "symbols": []
  }
]
```

### Rich-reference registry, signing, governance ports and content privacy

Capability ID: `runtime.rich-reference-governance`

Existing canonical reference-kind registry, denial-token signer and supplied subject, policy and audit ports, with rich-content builders/redaction preserving hidden values and metadata removal.

Use cases:

- Resolve registered reference kinds and redact rich code/diff content under supplied policy while retaining existing singleton identity and privacy behavior.

Constraints:

```json
{
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "avoidWhen": [
    "Host authentication, policy decisions, audit persistence or action authorization are required; these remain supplied ports and separate runtime authorities.",
    "A concrete UI renderer, provider, transport or populated domain kind registry is required."
  ]
}
```

Other capability declarations:

```json
{
  "aliases": [
    "rich-reference runtime registry",
    "rich-content privacy redaction"
  ]
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "registerKind",
      "getKind",
      "tryGetKind",
      "createDenialTokenSigner",
      "createSessionSalt",
      "AuditRecord",
      "AuditSink",
      "Subject",
      "KindPolicy",
      "KindPolicyProvider"
    ]
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/redaction",
    "symbols": [
      "redactRichSegments",
      "redactRichCodeBlock",
      "redactRichDiffBlock",
      "richSegmentsToText",
      "codeBlockFromText",
      "diffBlockFromLines",
      "textSegment",
      "DENIAL_TOKEN_PREFIX",
      "looksLikeDenialToken",
      "RichContentRedactionPolicy"
    ]
  },
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/kinds",
    "symbols": [
      "BUILT_IN_REFERENCE_KINDS",
      "registerBuiltInReferenceKinds",
      "entityKind",
      "resolveEntitySpec"
    ]
  }
]
```

### Resource URI template registry

Capability ID: `runtime.resource-registry`

Original resource registry, template definitions and resource-ref descriptors with preserved canonical class identity and URI matching/decoding behavior.

Use cases:

- Register and match caller-supplied read-only resource templates using the canonical class without importing compatibility registrations.

Constraints:

```json
{
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "avoidWhen": [
    "Registration or URI matching is being treated as authorization to execute the supplied resource resolver.",
    "A populated product resource catalog, concrete transport, backend or effectful resource implementation is required."
  ]
}
```

Other capability declarations:

```json
{
  "aliases": [
    "resource URI matching",
    "resource template registry"
  ]
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "ResourceRegistry",
      "ResourceMeta",
      "ResourceTemplateSpec",
      "defineResourceTemplate",
      "ResourceRefDescriptor",
      "resourceRef",
      "isResourceRef"
    ]
  }
]
```

### Data-view filter scope resolution

Capability ID: `runtime.data-view-filter-scope`

Original complete filter sanitization, clause conversion and locked-scope precedence execution over canonical Core data-view models.

Use cases:

- Resolve user and locked data-view filters with original defaults and conflict semantics.

Constraints:

```json
{
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "avoidWhen": [
    "Filter resolution is being treated as authorization to execute a data query."
  ]
}
```

Other capability declarations:

```json
{
  "aliases": [
    "data-view scoped filters"
  ]
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "ResolvedDataViewFilters",
      "ResolveDataViewFiltersInput",
      "resolveDataViewFilters",
      "sanitizeDataViewFilterSet",
      "filterSetToClauses",
      "pruneDataViewFilterClauses",
      "pruneDataViewFilterSet"
    ]
  }
]
```

### Portable predicate evaluation

Capability ID: `runtime.predicate-evaluation`

Original complete PredicateSpec evaluator and deterministic path/comparison helpers, preserving callback order and accessed-path evidence.

Use cases:

- Evaluate canonical pure predicate contracts with caller-supplied path resolution.

Constraints:

```json
{
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "avoidWhen": [
    "Predicate matching is being treated as a grant of authority or an action-policy decision."
  ]
}
```

Other capability declarations:

```json
{
  "aliases": [
    "predicate evaluation"
  ]
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "evaluatePredicateSpec",
      "PredicateEvaluation"
    ]
  }
]
```

### Entity and DataView contract registries

Capability ID: `runtime.entity-dataview-registries`

Original nominal entity, edge and DataView registries for caller-supplied portable contracts, preserving shared superclass identity, duplicate errors and version-selection behavior.

Use cases:

- Store supplied entity, edge and DataView contracts through the canonical nominal registry classes without importing populated compatibility registries.

Constraints:

```json
{
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "avoidWhen": [
    "A populated domain catalog, concrete UI renderer, backend or registration-as-authorization behavior is required."
  ]
}
```

Other capability declarations:

```json
{
  "aliases": [
    "entity contract registry",
    "DataView registry"
  ]
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "DataViewRegistry",
      "dataViewKey",
      "EntityRegistry",
      "tech_contracts_entities_registry_DocBlocks"
    ]
  }
]
```

## Catalogue metadata

```json
{
  "family": "runtime",
  "kind": "library",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server",
    "web",
    "react-native"
  ],
  "runtimes": [
    "node",
    "bun",
    "browser"
  ],
  "entrypoints": [
    ".",
    "./engine/events",
    "./redaction",
    "./storage/async-storage",
    "./storage/indexeddb",
    "./forms/form-registry",
    "./forms/projection-lookup",
    "./policy/context",
    "./policy/engine",
    "./policy/guards",
    "./policy",
    "./policy/opa-adapter",
    "./policy/registry",
    "./policy/requirements",
    "./policy/spec",
    "./policy/validation",
    "./rich-reference/runtime/dev-invariants",
    "./rich-reference/runtime/dispatch",
    "./rich-reference/runtime",
    "./rich-reference/runtime/redaction-enforcer",
    "./rich-reference/runtime/runtime",
    "./rich-reference/handler",
    "./rich-reference/redaction",
    "./shared/idempotency",
    "./shared/idempotency-shape",
    "./promptRegistry",
    "./rich-reference/kinds",
    "./rich-reference/kinds/entity",
    "./rich-reference/__fixtures__/cross-adapter-fixture",
    "./pwa/registry",
    "./migrations",
    "./model-registry"
  ]
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "createOnlineOnlyDataEngine",
      "createMemoryStorage"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/engine/events",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/redaction",
    "symbols": [
      "redactSecrets"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/storage/async-storage",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/storage/indexeddb",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/forms/form-registry",
    "symbols": [
      "FormRegistry"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/forms/projection-lookup",
    "symbols": [
      "findFormProjection",
      "formKey",
      "formProjectionVersion",
      "formProjectionKey",
      "formProjectionKeyForSpec"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/context",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/engine",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/guards",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/opa-adapter",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/registry",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/requirements",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/spec",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/policy/validation",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/dev-invariants",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/dispatch",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/redaction-enforcer",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/runtime",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/handler",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/redaction",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/shared/idempotency",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/shared/idempotency-shape",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.contracts.runtime.kernel",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/promptRegistry",
    "symbols": []
  },
  {
    "capabilityId": "runtime.rich-reference-governance",
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "registerKind",
      "getKind",
      "tryGetKind",
      "createDenialTokenSigner",
      "createSessionSalt",
      "AuditRecord",
      "AuditSink",
      "Subject",
      "KindPolicy",
      "KindPolicyProvider"
    ]
  },
  {
    "capabilityId": "runtime.rich-reference-governance",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/redaction",
    "symbols": [
      "redactRichSegments",
      "redactRichCodeBlock",
      "redactRichDiffBlock",
      "richSegmentsToText",
      "codeBlockFromText",
      "diffBlockFromLines",
      "textSegment",
      "DENIAL_TOKEN_PREFIX",
      "looksLikeDenialToken",
      "RichContentRedactionPolicy"
    ]
  },
  {
    "capabilityId": "runtime.rich-reference-governance",
    "from": "@lssm-tech/lib.contracts-runtime-kernel/rich-reference/kinds",
    "symbols": [
      "BUILT_IN_REFERENCE_KINDS",
      "registerBuiltInReferenceKinds",
      "entityKind",
      "resolveEntitySpec"
    ]
  },
  {
    "capabilityId": "runtime.resource-registry",
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "ResourceRegistry",
      "ResourceMeta",
      "ResourceTemplateSpec",
      "defineResourceTemplate",
      "ResourceRefDescriptor",
      "resourceRef",
      "isResourceRef"
    ]
  },
  {
    "capabilityId": "runtime.data-view-filter-scope",
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "ResolvedDataViewFilters",
      "ResolveDataViewFiltersInput",
      "resolveDataViewFilters",
      "sanitizeDataViewFilterSet",
      "filterSetToClauses",
      "pruneDataViewFilterClauses",
      "pruneDataViewFilterSet"
    ]
  },
  {
    "capabilityId": "runtime.predicate-evaluation",
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "evaluatePredicateSpec",
      "PredicateEvaluation"
    ]
  },
  {
    "capabilityId": "runtime.entity-dataview-registries",
    "from": "@lssm-tech/lib.contracts-runtime-kernel",
    "symbols": [
      "DataViewRegistry",
      "dataViewKey",
      "EntityRegistry",
      "tech_contracts_entities_registry_DocBlocks"
    ]
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/lib.contracts-runtime-kernel` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/index.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/engine/events` — subpath `./engine/events`
  - `unconditional`: `./src/engine/events.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/engine/events.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/forms/form-registry` — subpath `./forms/form-registry`
  - `unconditional`: `./src/forms/form-registry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/forms/form-registry.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/forms/projection-lookup` — subpath `./forms/projection-lookup`
  - `unconditional`: `./src/forms/projection-lookup.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/forms/projection-lookup.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/redaction` — subpath `./redaction`
  - `unconditional`: `./src/redaction.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/redaction.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/storage/async-storage` — subpath `./storage/async-storage`
  - `unconditional`: `./src/storage/async-storage.native.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/storage/async-storage.native.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/storage/indexeddb` — subpath `./storage/indexeddb`
  - `unconditional`: `./src/storage/indexeddb.web.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/storage/indexeddb.web.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/context` — subpath `./policy/context`
  - `unconditional`: `./src/policy/context.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/context.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/engine` — subpath `./policy/engine`
  - `unconditional`: `./src/policy/engine.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/engine.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/guards` — subpath `./policy/guards`
  - `unconditional`: `./src/policy/guards.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/guards.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy` — subpath `./policy`
  - `unconditional`: `./src/policy/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/index.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/opa-adapter` — subpath `./policy/opa-adapter`
  - `unconditional`: `./src/policy/opa-adapter.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/opa-adapter.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/registry` — subpath `./policy/registry`
  - `unconditional`: `./src/policy/registry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/registry.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/requirements` — subpath `./policy/requirements`
  - `unconditional`: `./src/policy/requirements.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/requirements.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/spec` — subpath `./policy/spec`
  - `unconditional`: `./src/policy/spec.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/spec.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/policy/validation` — subpath `./policy/validation`
  - `unconditional`: `./src/policy/validation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/policy/validation.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/dev-invariants` — subpath `./rich-reference/runtime/dev-invariants`
  - `unconditional`: `./src/rich-reference/runtime/dev-invariants.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/runtime/dev-invariants.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/dispatch` — subpath `./rich-reference/runtime/dispatch`
  - `unconditional`: `./src/rich-reference/runtime/dispatch.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/runtime/dispatch.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime` — subpath `./rich-reference/runtime`
  - `unconditional`: `./src/rich-reference/runtime/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/runtime/index.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/redaction-enforcer` — subpath `./rich-reference/runtime/redaction-enforcer`
  - `unconditional`: `./src/rich-reference/runtime/redaction-enforcer.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/runtime/redaction-enforcer.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/runtime/runtime` — subpath `./rich-reference/runtime/runtime`
  - `unconditional`: `./src/rich-reference/runtime/runtime.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/runtime/runtime.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/handler` — subpath `./rich-reference/handler`
  - `unconditional`: `./src/rich-reference/handler.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/handler.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/redaction` — subpath `./rich-reference/redaction`
  - `unconditional`: `./src/rich-reference/redaction.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/redaction.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/shared/idempotency` — subpath `./shared/idempotency`
  - `unconditional`: `./src/shared/idempotency.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/shared/idempotency.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/shared/idempotency-shape` — subpath `./shared/idempotency-shape`
  - `unconditional`: `./src/shared/idempotency-shape.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/shared/idempotency-shape.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/promptRegistry` — subpath `./promptRegistry`
  - `unconditional`: `./src/promptRegistry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/promptRegistry.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/shared/attach-context` — subpath `./shared/attach-context`
  - `unconditional`: `./src/shared/attach-context.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/shared/attach-context.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/kinds` — subpath `./rich-reference/kinds`
  - `unconditional`: `./src/rich-reference/kinds/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/kinds/index.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/kinds/entity` — subpath `./rich-reference/kinds/entity`
  - `unconditional`: `./src/rich-reference/kinds/entity.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/kinds/entity.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/rich-reference/__fixtures__/cross-adapter-fixture` — subpath `./rich-reference/__fixtures__/cross-adapter-fixture`
  - `unconditional`: `./src/rich-reference/__fixtures__/cross-adapter-fixture.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/rich-reference/__fixtures__/cross-adapter-fixture.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/pwa/registry` — subpath `./pwa/registry`
  - `unconditional`: `./src/pwa/registry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/pwa/registry.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/migrations` — subpath `./migrations`
  - `unconditional`: `./src/migrations.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/migrations.ts); verified source file.

- `@lssm-tech/lib.contracts-runtime-kernel/model-registry` — subpath `./model-registry`
  - `unconditional`: `./src/model-registry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/src/model-registry.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "browser": "./dist/browser/index.js",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./engine/events": {
      "types": "./dist/engine/events.d.ts",
      "browser": "./dist/browser/engine/events.js",
      "bun": "./dist/engine/events.js",
      "node": "./dist/node/engine/events.js",
      "default": "./dist/engine/events.js"
    },
    "./forms/form-registry": {
      "types": "./dist/forms/form-registry.d.ts",
      "browser": "./dist/browser/forms/form-registry.js",
      "bun": "./dist/forms/form-registry.js",
      "node": "./dist/node/forms/form-registry.js",
      "default": "./dist/forms/form-registry.js"
    },
    "./forms/projection-lookup": {
      "types": "./dist/forms/projection-lookup.d.ts",
      "browser": "./dist/browser/forms/projection-lookup.js",
      "bun": "./dist/forms/projection-lookup.js",
      "node": "./dist/node/forms/projection-lookup.js",
      "default": "./dist/forms/projection-lookup.js"
    },
    "./redaction": {
      "types": "./dist/redaction.d.ts",
      "browser": "./dist/browser/redaction.js",
      "bun": "./dist/redaction.js",
      "node": "./dist/node/redaction.js",
      "default": "./dist/redaction.js"
    },
    "./storage/async-storage": {
      "types": "./dist/storage/async-storage.native.d.ts",
      "react-native": "./dist/native/storage/async-storage.native.js",
      "default": "./dist/native/storage/async-storage.native.js"
    },
    "./storage/indexeddb": {
      "types": "./dist/storage/indexeddb.web.d.ts",
      "browser": "./dist/browser/storage/indexeddb.web.js",
      "default": "./dist/storage/indexeddb.web.js"
    },
    "./policy/context": {
      "types": "./dist/policy/context.d.ts",
      "browser": "./dist/browser/policy/context.js",
      "bun": "./dist/policy/context.js",
      "node": "./dist/node/policy/context.js",
      "default": "./dist/policy/context.js"
    },
    "./policy/engine": {
      "types": "./dist/policy/engine.d.ts",
      "browser": "./dist/browser/policy/engine.js",
      "bun": "./dist/policy/engine.js",
      "node": "./dist/node/policy/engine.js",
      "default": "./dist/policy/engine.js"
    },
    "./policy/guards": {
      "types": "./dist/policy/guards.d.ts",
      "browser": "./dist/browser/policy/guards.js",
      "bun": "./dist/policy/guards.js",
      "node": "./dist/node/policy/guards.js",
      "default": "./dist/policy/guards.js"
    },
    "./policy": {
      "types": "./dist/policy/index.d.ts",
      "browser": "./dist/browser/policy/index.js",
      "bun": "./dist/policy/index.js",
      "node": "./dist/node/policy/index.js",
      "default": "./dist/policy/index.js"
    },
    "./policy/opa-adapter": {
      "types": "./dist/policy/opa-adapter.d.ts",
      "browser": "./dist/browser/policy/opa-adapter.js",
      "bun": "./dist/policy/opa-adapter.js",
      "node": "./dist/node/policy/opa-adapter.js",
      "default": "./dist/policy/opa-adapter.js"
    },
    "./policy/registry": {
      "types": "./dist/policy/registry.d.ts",
      "browser": "./dist/browser/policy/registry.js",
      "bun": "./dist/policy/registry.js",
      "node": "./dist/node/policy/registry.js",
      "default": "./dist/policy/registry.js"
    },
    "./policy/requirements": {
      "types": "./dist/policy/requirements.d.ts",
      "browser": "./dist/browser/policy/requirements.js",
      "bun": "./dist/policy/requirements.js",
      "node": "./dist/node/policy/requirements.js",
      "default": "./dist/policy/requirements.js"
    },
    "./policy/spec": {
      "types": "./dist/policy/spec.d.ts",
      "browser": "./dist/browser/policy/spec.js",
      "bun": "./dist/policy/spec.js",
      "node": "./dist/node/policy/spec.js",
      "default": "./dist/policy/spec.js"
    },
    "./policy/validation": {
      "types": "./dist/policy/validation.d.ts",
      "browser": "./dist/browser/policy/validation.js",
      "bun": "./dist/policy/validation.js",
      "node": "./dist/node/policy/validation.js",
      "default": "./dist/policy/validation.js"
    },
    "./rich-reference/runtime/dev-invariants": {
      "types": "./dist/rich-reference/runtime/dev-invariants.d.ts",
      "browser": "./dist/browser/rich-reference/runtime/dev-invariants.js",
      "bun": "./dist/rich-reference/runtime/dev-invariants.js",
      "node": "./dist/node/rich-reference/runtime/dev-invariants.js",
      "default": "./dist/rich-reference/runtime/dev-invariants.js"
    },
    "./rich-reference/runtime/dispatch": {
      "types": "./dist/rich-reference/runtime/dispatch.d.ts",
      "browser": "./dist/browser/rich-reference/runtime/dispatch.js",
      "bun": "./dist/rich-reference/runtime/dispatch.js",
      "node": "./dist/node/rich-reference/runtime/dispatch.js",
      "default": "./dist/rich-reference/runtime/dispatch.js"
    },
    "./rich-reference/runtime": {
      "types": "./dist/rich-reference/runtime/index.d.ts",
      "browser": "./dist/browser/rich-reference/runtime/index.js",
      "bun": "./dist/rich-reference/runtime/index.js",
      "node": "./dist/node/rich-reference/runtime/index.js",
      "default": "./dist/rich-reference/runtime/index.js"
    },
    "./rich-reference/runtime/redaction-enforcer": {
      "types": "./dist/rich-reference/runtime/redaction-enforcer.d.ts",
      "browser": "./dist/browser/rich-reference/runtime/redaction-enforcer.js",
      "bun": "./dist/rich-reference/runtime/redaction-enforcer.js",
      "node": "./dist/node/rich-reference/runtime/redaction-enforcer.js",
      "default": "./dist/rich-reference/runtime/redaction-enforcer.js"
    },
    "./rich-reference/runtime/runtime": {
      "types": "./dist/rich-reference/runtime/runtime.d.ts",
      "browser": "./dist/browser/rich-reference/runtime/runtime.js",
      "bun": "./dist/rich-reference/runtime/runtime.js",
      "node": "./dist/node/rich-reference/runtime/runtime.js",
      "default": "./dist/rich-reference/runtime/runtime.js"
    },
    "./rich-reference/handler": {
      "types": "./dist/rich-reference/handler.d.ts",
      "browser": "./dist/browser/rich-reference/handler.js",
      "bun": "./dist/rich-reference/handler.js",
      "node": "./dist/node/rich-reference/handler.js",
      "default": "./dist/rich-reference/handler.js"
    },
    "./rich-reference/redaction": {
      "types": "./dist/rich-reference/redaction.d.ts",
      "browser": "./dist/browser/rich-reference/redaction.js",
      "bun": "./dist/rich-reference/redaction.js",
      "node": "./dist/node/rich-reference/redaction.js",
      "default": "./dist/rich-reference/redaction.js"
    },
    "./shared/idempotency": {
      "types": "./dist/shared/idempotency.d.ts",
      "browser": "./dist/browser/shared/idempotency.js",
      "bun": "./dist/shared/idempotency.js",
      "node": "./dist/node/shared/idempotency.js",
      "default": "./dist/shared/idempotency.js"
    },
    "./shared/idempotency-shape": {
      "types": "./dist/shared/idempotency-shape.d.ts",
      "browser": "./dist/browser/shared/idempotency-shape.js",
      "bun": "./dist/shared/idempotency-shape.js",
      "node": "./dist/node/shared/idempotency-shape.js",
      "default": "./dist/shared/idempotency-shape.js"
    },
    "./promptRegistry": {
      "types": "./dist/promptRegistry.d.ts",
      "browser": "./dist/browser/promptRegistry.js",
      "bun": "./dist/promptRegistry.js",
      "node": "./dist/node/promptRegistry.js",
      "default": "./dist/promptRegistry.js"
    },
    "./shared/attach-context": {
      "types": "./dist/shared/attach-context.d.ts",
      "browser": "./dist/browser/shared/attach-context.js",
      "bun": "./dist/shared/attach-context.js",
      "node": "./dist/node/shared/attach-context.js",
      "default": "./dist/shared/attach-context.js"
    },
    "./rich-reference/kinds": {
      "types": "./dist/rich-reference/kinds/index.d.ts",
      "browser": "./dist/browser/rich-reference/kinds/index.js",
      "bun": "./dist/rich-reference/kinds/index.js",
      "node": "./dist/node/rich-reference/kinds/index.js",
      "default": "./dist/rich-reference/kinds/index.js"
    },
    "./rich-reference/kinds/entity": {
      "types": "./dist/rich-reference/kinds/entity.d.ts",
      "browser": "./dist/browser/rich-reference/kinds/entity.js",
      "bun": "./dist/rich-reference/kinds/entity.js",
      "node": "./dist/node/rich-reference/kinds/entity.js",
      "default": "./dist/rich-reference/kinds/entity.js"
    },
    "./rich-reference/__fixtures__/cross-adapter-fixture": {
      "types": "./dist/rich-reference/__fixtures__/cross-adapter-fixture.d.ts",
      "browser": "./dist/browser/rich-reference/__fixtures__/cross-adapter-fixture.js",
      "bun": "./dist/rich-reference/__fixtures__/cross-adapter-fixture.js",
      "node": "./dist/node/rich-reference/__fixtures__/cross-adapter-fixture.js",
      "default": "./dist/rich-reference/__fixtures__/cross-adapter-fixture.js"
    },
    "./pwa/registry": {
      "types": "./dist/pwa/registry.d.ts",
      "browser": "./dist/browser/pwa/registry.js",
      "bun": "./dist/pwa/registry.js",
      "node": "./dist/node/pwa/registry.js",
      "default": "./dist/pwa/registry.js"
    },
    "./migrations": {
      "types": "./dist/migrations.d.ts",
      "bun": "./dist/migrations.js",
      "node": "./dist/node/migrations.js",
      "default": "./dist/migrations.js"
    },
    "./model-registry": {
      "types": "./dist/model-registry.d.ts",
      "bun": "./dist/model-registry.js",
      "node": "./dist/node/model-registry.js",
      "default": "./dist/model-registry.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-spec-core](https://lssm.co/docs/packages/lib.contracts-spec-core/): `workspace:^`
- [@lssm-tech/lib.crypto-utils](https://lssm.co/docs/packages/lib.crypto-utils/): `workspace:^`
- [@lssm-tech/lib.schema](https://lssm.co/docs/packages/lib.schema/): `workspace:^`
- `compare-versions`: `catalog:data`
- `zod`: `catalog:`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "prebuild": "contractspec-bun-build prebuild",
  "typecheck": "tsgo --noEmit -p tsconfig.json"
}
```

## Declared documentation links

- [ContractSpec runtime kernel package guide](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/foundation/contracts-runtime-kernel/README.md) — verified pinned repository path.

```json
{
  "url": "https://github.com/lssm-tech/contractspec/blob/main/packages/foundation/contracts-runtime-kernel/README.md",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/lib.contracts-runtime-kernel.txt",
  "route": "/llms/lib.contracts-runtime-kernel",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.contracts-runtime-kernel.txt",
  "blobSha": "1853194c88fea01773955e29b175e1fa24b33349",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```