Stratara.Contracts 3.2.2

Prefix Reserved

There is a newer version of this package available.
See the version list below for details.

dotnet add package Stratara.Contracts --version 3.2.2

NuGet\Install-Package Stratara.Contracts -Version 3.2.2

This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.

<PackageReference Include="Stratara.Contracts" Version="3.2.2" />

For projects that support PackageReference, copy this XML node into the project file to reference the package.

<PackageVersion Include="Stratara.Contracts" Version="3.2.2" />
                    

                            Directory.Packages.props

<PackageReference Include="Stratara.Contracts" />
                    

                            Project file

For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.

paket add Stratara.Contracts --version 3.2.2

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

#r "nuget: Stratara.Contracts, 3.2.2"

#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.

#:package Stratara.Contracts@3.2.2

#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.

#addin nuget:?package=Stratara.Contracts&version=3.2.2
                    

                            Install as a Cake Addin

#tool nuget:?package=Stratara.Contracts&version=3.2.2
                    

                            Install as a Cake Tool

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

Stratara.Contracts

License: MIT.

Wire-level POCO contracts shared by every Stratara package. Pure data records — no runtime, no DI, no infrastructure deps. Safe to reference from any layer.

Messages/EventMessage, EventBundle, CommandEnvelope — the cross-process envelope shapes that messaging adapters (Stratara.Outbox.RabbitMQ etc.) serialise on and off the bus.
Requests/PagedRequest — shared pagination + sort record used by query handlers across the family.
Session/SessionContext — public data shape for actor/subject identity, correlation, causation, and connection routing. The ISessionContextProvider service abstraction lives in Stratara.Abstractions; the ASP.NET Core middleware that populates it lives in Stratara.Sessions.

Quick reference

// Build a CommandEnvelope outside the framework (rare, but supported)
var envelope = new CommandEnvelope(
    Id: Guid.CreateVersion7(),
    CommandJson: commandJson,
    CommandTypeName: typeof(MyCommand).AssemblyQualifiedName!,
    SessionContextJson: sessionContextJson);

Dependencies

None. Contracts is the lowest tier in the Stratara dependency graph.

Product	Compatible and additional computed target framework versions.
.NET	net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed.

Compatible target framework(s)

Included target framework(s) (in package)

Learn more about Target Frameworks and .NET Standard.

net10.0
- No dependencies.

NuGet packages (9)

Showing the top 5 NuGet packages that depend on Stratara.Contracts:

Package	Downloads
Stratara.Abstractions Contract interfaces and POCO records for the Stratara CQRS / Event Sourcing framework — Mediator, EventSourcing, Persistence, Outbox, Messaging, Session, Security, Authorization. Library-safe, no EF Core or message-bus runtime.	9.5K
Stratara.Sessions ASP.NET Core middleware and provider for Stratara's Actor/Subject session model. Reads tenant and user from JWT claims (or X-Tenant-Id / X-Client-Id headers) and populates the ambient ISessionContextProvider for every request.	8.5K
Stratara.Shared Umbrella package for the Stratara framework — source-generated logger extensions for command flows, domain-event helpers, merge primitives, and the Tier-A/B abstractions surface re-exported as one transitive bundle.	5.9K
Stratara.Projections Projection runtime for the Stratara event-sourced stack — projection-handler discovery, change-set creation, update application, and projection manager. Sits between read-model repositories and the event-bundle dispatcher.	3.1K
Stratara.Outbox.RabbitMQ Outbox-pattern command and event dispatch for the Stratara event-sourced stack — RabbitMQ IMessageBus implementation, retry worker, mediator command worker, and Redis-coordinated projection-replay state. Azure Service Bus support ships as the sibling Stratara.Outbox.AzureServiceBus package.	2.7K

GitHub repositories

This package is not used by any popular GitHub repositories.

Version	Downloads	Last Updated
4.0.1	0	9/2/2026
4.0.0	245	8/31/2026
4.0.0-preview.1	91	8/31/2026
3.4.0	287	8/28/2026
3.3.0	525	8/25/2026
3.2.3	364	8/22/2026
3.2.2	914	8/14/2026
3.2.1	920	8/2/2026
3.2.0	350	7/18/2026
3.1.7	476	7/1/2026
3.1.6	756	6/22/2026
3.1.5	330	6/22/2026
3.1.4	2,201	6/15/2026
3.1.3	338	6/10/2026
3.1.2	336	6/5/2026
3.1.1	1,055	6/1/2026
3.1.0	306	5/30/2026
3.0.23	299	5/28/2026

API keys can now be bootstrapped. Issuance always generated the key itself, which does not fit the
setups where server and caller have to share a key *before* either starts — container orchestration,
CI provisioning, self-hosted bundles, end-to-end test hosts. This release adds an import path for a
key the caller already holds, plus the canonical key format as public API so callers generate values
instead of inventing them.

### Added

- **`IApiKeyStore.ImportAsync` — store a machine key whose raw value the caller already holds.**
Issuance generates the key itself, which is the wrong shape when server and caller must share it
*before* either boots: container orchestration, CI provisioning, self-hosted bundles, end-to-end
test hosts. Without this path, consumers bypassed the store and reimplemented its internals (the
digest format and the machine-key membership row) — a copy that keeps compiling after the store
changes and fails as a runtime 401. Import is idempotent, so it can run unconditionally on every
boot: a value that is already stored returns the existing descriptor and the stored key is never
mutated, so a changed configuration cannot escalate a key's roles or extend its expiry unnoticed.
Revoked, expired, and foreign-tenant values are rejected rather than silently adopted, and
concurrent replicas racing the same first import converge on one key. Machine keys only —
`ApiKeyImportRequest` carries no `UserId`.
- **`ApiKeyFormat` (`Stratara.Abstractions.ApiKeys`) — the canonical raw-key format as public API.**
`CreateRawKey()` generates `stk_` plus the Base64Url encoding of 32 CSPRNG bytes; `IsWellFormed()`
checks that shape. `ImportAsync` accepts only well-formed values: the store keeps its stored
digest unsalted because a generated key carries 256 bits of entropy, and a hand-picked value would
quietly invalidate that. Generate keys out of band with `CreateRawKey()` and keep them in a secret
store — the type lives in the abstractions package so host-builder and orchestration projects can
reach it without referencing the storage implementation.
- **`InMemoryApiKeyStore` (`Stratara.Testing`) — the drop-in double for the API-key store**,
mirroring issuance, import, fail-closed validation, revocation, and the erasure sweeps, and
materializing machine keys into a membership store you can share and inspect.

### Changed

- **API-key lifecycle events are now logged** (`Stratara.Diagnostics` event-ID range 116_000):
import, idempotent repeat, and a repeat that supplied different parameters. Key ids and tenant
ids only — never the raw key or its digest.
- **For implementers of `IApiKeyStore`:** the interface gained `ImportAsync`. Custom implementations
need the new member; callers are unaffected.