# @lssm-tech/lib.data-exchange-server

Server-side adapters and execution services for SchemaModel-first data interchange

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.5`
- Package path: `packages/platform/delivery/data-exchange-server`
- Manifest path: `packages/platform/delivery/data-exchange-server/package.json`
- Manifest Git blob: `8be59f395996c533762d07a487848494089945ff`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/lib.data-exchange-server](https://lssm.co/docs/packages/lib.data-exchange-server/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.data-exchange-server.txt)

## Package metadata

```json
{
  "layer": "platform",
  "physicalArea": "delivery",
  "primaryArea": "forms-and-data",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "runtime",
    "catalogKind": "library",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Forms, data views and data exchange](https://lssm.co/docs/areas/forms-and-data/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/platform/delivery/data-exchange-server/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/README.md",
  "blobSha": "8a4b21ec273cfb365e6db1c67529b2573428aa51",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# @lssm-tech/lib.data-exchange-server

Website: https://contractspec.io

**Server-side adapters, execution services, and workflow templates for SchemaModel-first data interchange.**

## What It Provides

- File, HTTP, SQL, and storage adapter families.
- SQL adapters that preserve portable database endpoint metadata while delegating execution to injected clients/provider boundaries.
- Dry-run, validation, preview, execute, retry, and audit services.
- `WorkflowSpec` templates for interchange orchestration.
- A fail-closed governed projection gateway, revocation reconciliation, and
  privacy-status projection for ecosystem data sharing.
- A host-injected SecretProvider envelope sealer that canonicalizes the exact
  authorization as AES-256-GCM AAD and returns ciphertext-only product envelopes.
- A bounded HTTPS materialization port that delivers one encrypted dispatch to
  an exact product ingress without ambient credentials or redirect following.

## Usage

Import the root entrypoint from `@lssm-tech/lib.data-exchange-server`, or use `./adapters`, `./governed`, `./services`, and `./workflow`.

## Template-Aware Imports

Server dry-runs and executions accept the same import templates as core. This lets users upload partner-specific CSV/JSON/XML layouts while the server previews normalized records before writing them.

```ts
import { defineDataExchangeTemplate } from "@lssm-tech/lib.data-exchange-core";
import { dryRunImport, executeImport } from "@lssm-tech/lib.data-exchange-server";

const template = defineDataExchangeTemplate({
	key: "invoices.import",
	version: "1.0.0",
	columns: [
		{
			key: "id",
			label: "Invoice ID",
			targetField: "id",
			required: true,
			sourceAliases: ["Invoice Number", "No facture"],
		},
		{
			key: "amount",
			label: "Amount",
			targetField: "amount",
			format: {
				kind: "number",
				decimalSeparator: ",",
				thousandsSeparator: ".",
			},
		},
	],
});

const preview = await dryRunImport({
	source: {
		kind: "file",
		path: "partner.csv",
		format: "csv",
		codecOptions: { csv: { delimiter: ";", skipRows: 1 } },
	},
	target: { kind: "memory", format: "json" },
	schema: InvoiceImportSchema,
	template,
});

if (preview.issues.every((issue) => issue.severity !== "error")) {
	await executeImport({
		source: {
			kind: "file",
			path: "partner.csv",
			format: "csv",
			codecOptions: { csv: { delimiter: ";", skipRows: 1 } },
		},
		target: { kind: "memory", format: "json" },
		schema: InvoiceImportSchema,
		template,
	});
}
```


Execution audit entries record whether mappings came from explicit mappings, template resolution, or inference.

## Governed projection gateway

`@lssm-tech/lib.data-exchange-server/governed` evaluates catalog, grant,
subject, tenant, audience, purpose, field, time, residency, revision, and
revocation-watermark authority before calling the injected source port. A
denial is recorded without a payload or field disclosure; an allowed response
returns only the exact requested field allowlist.

Revocation reconciliation suspends a share when a required consumer is
missing, stale, or reports a failed acknowledgement. Hosts own durable stores,
encryption, transport, deletion/export jobs, and operator workflows. The
package never assumes that products share a database or that a managed runtime
owns customer keys.

The delivery worker accepts provider-neutral consumer and rights-processor
ports. Only an explicit applied/complete result advances a terminal success;
exceptions are indeterminate and fail closed. Missing bindings are retryable,
attempts are leased and bounded, and expired leases can be reclaimed without
claiming that an unknown downstream side effect succeeded.

`createSecretProviderGovernedEnvelopeSealer` resolves a product-owned key
reference through an injected binding and `SecretProvider`. It accepts only a
32-byte AES-256 key, requires payload fields to equal the authorized field
allowlist, uses canonical authorization bytes as AAD, appends the GCM tag to the
encoded ciphertext, hashes the randomized ciphertext rather than low-entropy
plaintext, requires an exact configured key version when one is pinned, and
rejects oversized payloads before encryption. It clears its local key copy
after sealing. Provider errors are replaced with a
redacted failure. The sealer never owns, rotates, serializes, or logs key material.

`createGovernedRecoveryIngress` is the product-side HTTP trust boundary. It
requires a strong server-only bearer, exact application binding, matching
idempotency header, bounded strict dispatch body, and schema-valid product
evidence. Authentication or binding failures never invoke the product port;
product exceptions become a generic `503` without leaking diagnostics.

`createGovernedMaterializationIngressRegistry` is the independent encrypted-copy
boundary. It selects one ingress from the exact source application path and a
distinct 32-character-or-longer source-to-receiver bearer. The strict dispatch
must match receiver application and region, exact purpose, lawful-basis and
consent evidence, fields, grant/revision/watermark, expiry and retention,
receiver encryption algorithm/key reference, and idempotency key. Unknown
sources, stale authority, plaintext, source subjects, central identity, and
forged receipts fail before persistence. Hosts may bind recovery without
materialization; materialization requires both an explicit receiver region and
at least one source binding.

`createGovernedMaterializationHttpPort` is the matching source-side transport.
It accepts one exact HTTPS origin, source application, strong server-only bearer,
and optional injected fetch implementation. Requests carry the delivery ID as
their idempotency key, omit ambient credentials, refuse redirects, and use a
bounded timeout. Only a `200 application/json` receipt under 64 KiB is parsed;
the receipt must bind the exact delivery, materialization, and consumer. Network,
status, media-type, body-size, parsing, and receipt failures collapse to one
redacted unavailable error. The port never decrypts or logs product data.

`createGovernedRecoveryHttpPort` applies the same exact-origin, strong-bearer,
idempotency, no-credentials, no-redirect, bounded-timeout, JSON media-type, and
streaming response limits to projection revocation and privacy-rights work. It
removes worker lease metadata before transport, rejects application substitution
before network I/O, returns a bounded retry result for an explicit downstream
status, and collapses network or invalid-receipt outcomes to one redacted error.


## Declared capabilities

### Lib Data Exchange Server

Capability ID: `package.lssm.tech.lib.data.exchange.server`

Server-side adapters and execution services for SchemaModel-first data interchange

Use cases:

- Adopt server-side adapters and execution services for schemamodel-first data interchange

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/lib.data-exchange-server package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "contractspec",
    "data",
    "import",
    "export",
    "server",
    "typescript",
    "lib",
    "exchange"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.data-exchange-server",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/adapters",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/adapters/file",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/adapters/http",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/adapters/sql",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/adapters/storage",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/data-exchange-server.feature",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/governed",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/services",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/services/execution",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/services/io",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.data-exchange-server/services/retry",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "runtime",
  "kind": "library",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    ".",
    "./adapters",
    "./adapters/file",
    "./adapters/http",
    "./adapters/sql",
    "./adapters/storage",
    "./data-exchange-server.feature",
    "./governed",
    "./services",
    "./services/execution",
    "./services/io",
    "./services/retry",
    "./types",
    "./workflow",
    "./workflow/interchange-workflow"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/adapters",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/adapters/file",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/adapters/http",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/adapters/sql",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/adapters/storage",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/data-exchange-server.feature",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/governed",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/services",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/services/execution",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/services/io",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.data.exchange.server",
    "from": "@lssm-tech/lib.data-exchange-server/services/retry",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/lib.data-exchange-server` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/index.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/adapters` — subpath `./adapters`
  - `unconditional`: `./src/adapters/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/adapters/index.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/adapters/file` — subpath `./adapters/file`
  - `unconditional`: `./src/adapters/file.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/adapters/file.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/adapters/http` — subpath `./adapters/http`
  - `unconditional`: `./src/adapters/http.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/adapters/http.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/adapters/sql` — subpath `./adapters/sql`
  - `unconditional`: `./src/adapters/sql.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/adapters/sql.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/adapters/storage` — subpath `./adapters/storage`
  - `unconditional`: `./src/adapters/storage.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/adapters/storage.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/data-exchange-server.feature` — subpath `./data-exchange-server.feature`
  - `unconditional`: `./src/data-exchange-server.feature.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/data-exchange-server.feature.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed` — subpath `./governed`
  - `unconditional`: `./src/governed/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/index.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/bounded-json-response` — subpath `./governed/bounded-json-response`
  - `unconditional`: `./src/governed/bounded-json-response.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/bounded-json-response.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/delivery-state` — subpath `./governed/delivery-state`
  - `unconditional`: `./src/governed/delivery-state.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/delivery-state.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/delivery-worker` — subpath `./governed/delivery-worker`
  - `unconditional`: `./src/governed/delivery-worker.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/delivery-worker.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/envelope-crypto` — subpath `./governed/envelope-crypto`
  - `unconditional`: `./src/governed/envelope-crypto.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/envelope-crypto.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/envelope-sealer` — subpath `./governed/envelope-sealer`
  - `unconditional`: `./src/governed/envelope-sealer.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/envelope-sealer.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/gateway` — subpath `./governed/gateway`
  - `unconditional`: `./src/governed/gateway.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/gateway.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/governed-fixtures` — subpath `./governed/governed-fixtures`
  - `unconditional`: `./src/governed/governed-fixtures.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/governed-fixtures.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/materialization-http-port` — subpath `./governed/materialization-http-port`
  - `unconditional`: `./src/governed/materialization-http-port.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/materialization-http-port.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/materialization-http-request` — subpath `./governed/materialization-http-request`
  - `unconditional`: `./src/governed/materialization-http-request.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/materialization-http-request.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/materialization-ingress` — subpath `./governed/materialization-ingress`
  - `unconditional`: `./src/governed/materialization-ingress.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/materialization-ingress.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/materialization-ingress-http` — subpath `./governed/materialization-ingress-http`
  - `unconditional`: `./src/governed/materialization-ingress-http.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/materialization-ingress-http.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/materialization-ingress-registry` — subpath `./governed/materialization-ingress-registry`
  - `unconditional`: `./src/governed/materialization-ingress-registry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/materialization-ingress-registry.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/ports` — subpath `./governed/ports`
  - `unconditional`: `./src/governed/ports.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/ports.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/privacy` — subpath `./governed/privacy`
  - `unconditional`: `./src/governed/privacy.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/privacy.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/reconciliation` — subpath `./governed/reconciliation`
  - `unconditional`: `./src/governed/reconciliation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/reconciliation.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/recovery-http-port` — subpath `./governed/recovery-http-port`
  - `unconditional`: `./src/governed/recovery-http-port.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/recovery-http-port.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/recovery-http-request` — subpath `./governed/recovery-http-request`
  - `unconditional`: `./src/governed/recovery-http-request.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/recovery-http-request.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/governed/recovery-ingress` — subpath `./governed/recovery-ingress`
  - `unconditional`: `./src/governed/recovery-ingress.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/governed/recovery-ingress.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/services` — subpath `./services`
  - `unconditional`: `./src/services/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/services/index.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/services/execution` — subpath `./services/execution`
  - `unconditional`: `./src/services/execution.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/services/execution.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/services/io` — subpath `./services/io`
  - `unconditional`: `./src/services/io.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/services/io.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/services/retry` — subpath `./services/retry`
  - `unconditional`: `./src/services/retry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/services/retry.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/types` — subpath `./types`
  - `unconditional`: `./src/types.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/types.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/workflow` — subpath `./workflow`
  - `unconditional`: `./src/workflow/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/workflow/index.ts); verified source file.

- `@lssm-tech/lib.data-exchange-server/workflow/interchange-workflow` — subpath `./workflow/interchange-workflow`
  - `unconditional`: `./src/workflow/interchange-workflow.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/delivery/data-exchange-server/src/workflow/interchange-workflow.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./adapters": {
      "types": "./dist/adapters/index.d.ts",
      "bun": "./dist/adapters/index.js",
      "node": "./dist/node/adapters/index.js",
      "default": "./dist/adapters/index.js"
    },
    "./adapters/file": {
      "types": "./dist/adapters/file.d.ts",
      "bun": "./dist/adapters/file.js",
      "node": "./dist/node/adapters/file.js",
      "default": "./dist/adapters/file.js"
    },
    "./adapters/http": {
      "types": "./dist/adapters/http.d.ts",
      "bun": "./dist/adapters/http.js",
      "node": "./dist/node/adapters/http.js",
      "default": "./dist/adapters/http.js"
    },
    "./adapters/sql": {
      "types": "./dist/adapters/sql.d.ts",
      "bun": "./dist/adapters/sql.js",
      "node": "./dist/node/adapters/sql.js",
      "default": "./dist/adapters/sql.js"
    },
    "./adapters/storage": {
      "types": "./dist/adapters/storage.d.ts",
      "bun": "./dist/adapters/storage.js",
      "node": "./dist/node/adapters/storage.js",
      "default": "./dist/adapters/storage.js"
    },
    "./data-exchange-server.feature": {
      "types": "./dist/data-exchange-server.feature.d.ts",
      "bun": "./dist/data-exchange-server.feature.js",
      "node": "./dist/node/data-exchange-server.feature.js",
      "default": "./dist/data-exchange-server.feature.js"
    },
    "./governed": {
      "types": "./dist/governed/index.d.ts",
      "bun": "./dist/governed/index.js",
      "node": "./dist/node/governed/index.js",
      "default": "./dist/governed/index.js"
    },
    "./governed/bounded-json-response": {
      "types": "./dist/governed/bounded-json-response.d.ts",
      "bun": "./dist/governed/bounded-json-response.js",
      "node": "./dist/node/governed/bounded-json-response.js",
      "default": "./dist/governed/bounded-json-response.js"
    },
    "./governed/delivery-state": {
      "types": "./dist/governed/delivery-state.d.ts",
      "bun": "./dist/governed/delivery-state.js",
      "node": "./dist/node/governed/delivery-state.js",
      "default": "./dist/governed/delivery-state.js"
    },
    "./governed/delivery-worker": {
      "types": "./dist/governed/delivery-worker.d.ts",
      "bun": "./dist/governed/delivery-worker.js",
      "node": "./dist/node/governed/delivery-worker.js",
      "default": "./dist/governed/delivery-worker.js"
    },
    "./governed/envelope-crypto": {
      "types": "./dist/governed/envelope-crypto.d.ts",
      "bun": "./dist/governed/envelope-crypto.js",
      "node": "./dist/node/governed/envelope-crypto.js",
      "default": "./dist/governed/envelope-crypto.js"
    },
    "./governed/envelope-sealer": {
      "types": "./dist/governed/envelope-sealer.d.ts",
      "bun": "./dist/governed/envelope-sealer.js",
      "node": "./dist/node/governed/envelope-sealer.js",
      "default": "./dist/governed/envelope-sealer.js"
    },
    "./governed/gateway": {
      "types": "./dist/governed/gateway.d.ts",
      "bun": "./dist/governed/gateway.js",
      "node": "./dist/node/governed/gateway.js",
      "default": "./dist/governed/gateway.js"
    },
    "./governed/governed-fixtures": {
      "types": "./dist/governed/governed-fixtures.d.ts",
      "bun": "./dist/governed/governed-fixtures.js",
      "node": "./dist/node/governed/governed-fixtures.js",
      "default": "./dist/governed/governed-fixtures.js"
    },
    "./governed/materialization-http-port": {
      "types": "./dist/governed/materialization-http-port.d.ts",
      "bun": "./dist/governed/materialization-http-port.js",
      "node": "./dist/node/governed/materialization-http-port.js",
      "default": "./dist/governed/materialization-http-port.js"
    },
    "./governed/materialization-http-request": {
      "types": "./dist/governed/materialization-http-request.d.ts",
      "bun": "./dist/governed/materialization-http-request.js",
      "node": "./dist/node/governed/materialization-http-request.js",
      "default": "./dist/governed/materialization-http-request.js"
    },
    "./governed/materialization-ingress": {
      "types": "./dist/governed/materialization-ingress.d.ts",
      "bun": "./dist/governed/materialization-ingress.js",
      "node": "./dist/node/governed/materialization-ingress.js",
      "default": "./dist/governed/materialization-ingress.js"
    },
    "./governed/materialization-ingress-http": {
      "types": "./dist/governed/materialization-ingress-http.d.ts",
      "bun": "./dist/governed/materialization-ingress-http.js",
      "node": "./dist/node/governed/materialization-ingress-http.js",
      "default": "./dist/governed/materialization-ingress-http.js"
    },
    "./governed/materialization-ingress-registry": {
      "types": "./dist/governed/materialization-ingress-registry.d.ts",
      "bun": "./dist/governed/materialization-ingress-registry.js",
      "node": "./dist/node/governed/materialization-ingress-registry.js",
      "default": "./dist/governed/materialization-ingress-registry.js"
    },
    "./governed/ports": {
      "types": "./dist/governed/ports.d.ts",
      "bun": "./dist/governed/ports.js",
      "node": "./dist/node/governed/ports.js",
      "default": "./dist/governed/ports.js"
    },
    "./governed/privacy": {
      "types": "./dist/governed/privacy.d.ts",
      "bun": "./dist/governed/privacy.js",
      "node": "./dist/node/governed/privacy.js",
      "default": "./dist/governed/privacy.js"
    },
    "./governed/reconciliation": {
      "types": "./dist/governed/reconciliation.d.ts",
      "bun": "./dist/governed/reconciliation.js",
      "node": "./dist/node/governed/reconciliation.js",
      "default": "./dist/governed/reconciliation.js"
    },
    "./governed/recovery-http-port": {
      "types": "./dist/governed/recovery-http-port.d.ts",
      "bun": "./dist/governed/recovery-http-port.js",
      "node": "./dist/node/governed/recovery-http-port.js",
      "default": "./dist/governed/recovery-http-port.js"
    },
    "./governed/recovery-http-request": {
      "types": "./dist/governed/recovery-http-request.d.ts",
      "bun": "./dist/governed/recovery-http-request.js",
      "node": "./dist/node/governed/recovery-http-request.js",
      "default": "./dist/governed/recovery-http-request.js"
    },
    "./governed/recovery-ingress": {
      "types": "./dist/governed/recovery-ingress.d.ts",
      "bun": "./dist/governed/recovery-ingress.js",
      "node": "./dist/node/governed/recovery-ingress.js",
      "default": "./dist/governed/recovery-ingress.js"
    },
    "./services": {
      "types": "./dist/services/index.d.ts",
      "bun": "./dist/services/index.js",
      "node": "./dist/node/services/index.js",
      "default": "./dist/services/index.js"
    },
    "./services/execution": {
      "types": "./dist/services/execution.d.ts",
      "bun": "./dist/services/execution.js",
      "node": "./dist/node/services/execution.js",
      "default": "./dist/services/execution.js"
    },
    "./services/io": {
      "types": "./dist/services/io.d.ts",
      "bun": "./dist/services/io.js",
      "node": "./dist/node/services/io.js",
      "default": "./dist/services/io.js"
    },
    "./services/retry": {
      "types": "./dist/services/retry.d.ts",
      "bun": "./dist/services/retry.js",
      "node": "./dist/node/services/retry.js",
      "default": "./dist/services/retry.js"
    },
    "./types": {
      "types": "./dist/types.d.ts",
      "bun": "./dist/types.js",
      "node": "./dist/node/types.js",
      "default": "./dist/types.js"
    },
    "./workflow": {
      "types": "./dist/workflow/index.d.ts",
      "bun": "./dist/workflow/index.js",
      "node": "./dist/node/workflow/index.js",
      "default": "./dist/workflow/index.js"
    },
    "./workflow/interchange-workflow": {
      "types": "./dist/workflow/interchange-workflow.d.ts",
      "bun": "./dist/workflow/interchange-workflow.js",
      "node": "./dist/node/workflow/interchange-workflow.js",
      "default": "./dist/workflow/interchange-workflow.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.contracts-spec-core](https://lssm.co/docs/packages/lib.contracts-spec-core/): `workspace:^`
- [@lssm-tech/lib.data-exchange-core](https://lssm.co/docs/packages/lib.data-exchange-core/): `workspace:^`
- [@lssm-tech/lib.orchestration-spec](https://lssm.co/docs/packages/lib.orchestration-spec/): `workspace:^`
- [@lssm-tech/lib.schema](https://lssm.co/docs/packages/lib.schema/): `workspace:^`
- [@lssm-tech/lib.workflow-composer](https://lssm.co/docs/packages/lib.workflow-composer/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "publish:pkg": "bun publish --tolerate-republish --ignore-scripts --verbose",
  "publish:pkg:canary": "bun publish:pkg --tag canary",
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "dev": "contractspec-bun-build dev",
  "clean": "rimraf dist .turbo",
  "lint": "bun lint:fix",
  "lint:fix": "node ../../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../../scripts/biome.cjs check --write .",
  "lint:check": "node ../../../../scripts/biome.cjs check .",
  "prebuild": "contractspec-bun-build prebuild",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Lib Data Exchange Server documentation](https://www.npmjs.com/package/%40lssm-tech%2Flib.data-exchange-server) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Flib.data-exchange-server",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/lib.data-exchange-server.txt",
  "route": "/llms/lib.data-exchange-server",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.data-exchange-server.txt",
  "blobSha": "8a4b21ec273cfb365e6db1c67529b2573428aa51",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```