@pranix/protocol-core

Protocol Core 1.0 as an installable package. Only three modules — credentials, evidence, governance. No auth / billing / i18n / voice / notifications (future work). Reads/writes the existing control-plane tables; introduces no new tables.

Install

Public package on npmjs.org — no token, no .npmrc, no GitHub auth:

npm install @pranix/protocol-core

Each product passes its own Supabase client (pointing at the control plane). No build step — plain ESM.

Use

import { credentials, evidence, governance } from "@pranix/protocol-core";

const cred = credentials(supabase);
await cred.atRisk(30);            // credentials expiring / below threshold

const ev = evidence(supabase);
await ev.emit({ proves: "warranty email sent", project: "quickscanz" });

const gov = governance(supabase);
const gate = await gov.preflight("apply_migration", { project, artifact });
if (!gate.ok) throw new Error(gate.reason);

Exports

| Import | Provides | |---|---| | @pranix/protocol-core | all three | | @pranix/protocol-core/credentials | health, atRisk, report | | @pranix/protocol-core/evidence | emit, forProject | | @pranix/protocol-core/governance | preflight, gate, promote |

Versioning & publish

SemVer. No transpile step (ESM, Node ≥18). Published to public npm by .github/workflows/protocol-core-publish.yml (fires on a version bump landing on main, using NPM_TOKEN).

Peer dependency

@supabase/supabase-js >= 2 (provided by the consuming product).