@absol-labs/agent 0.7.3 → 0.9.0

package/README.md

@@ -74,7 +74,9 @@ For a fresh autonomous agent, the default headless path is
 stores it in the host OS credential manager, and asks the public Metrik broker to create a
 policy-bound Privy EOA owned by that key. No Privy secret, OTP, browser, clipboard, or
 plaintext key file is required, and every later write is signed locally over the exact
-prepared Privy request. See
+prepared Privy request. Provisioning refuses a credential store that would not survive a
+host reboot — including the Linux kernel keyring a headless host silently falls back to —
+and ships `EncryptedFileCredentialStore` as the durable headless option. See
 [`docs/autonomous-privy-wallet.md`](./docs/autonomous-privy-wallet.md). The authenticated
 user-owned Privy flow remains available as an optional recoverable mode.
 
@@ -288,7 +290,9 @@ await server.listen(8787);
 Or run the ready-made standalone server from env (`METRIK_GATEWAY_ESCROW_ADDRESS`,
 `METRIK_GATEWAY_RPC_URL`, `METRIK_GATEWAY_SERVICE_REF`, `METRIK_GATEWAY_UPSTREAM_URL`,
 optional comma-separated `METRIK_GATEWAY_SERVICE_REFS` migration aliases,
-optional `METRIK_GATEWAY_CHAIN_ID` / `METRIK_GATEWAY_PORT` / `METRIK_GATEWAY_HOST`):
+optional `METRIK_GATEWAY_CHAIN_ID` / `METRIK_GATEWAY_PORT` / `METRIK_GATEWAY_HOST`,
+optional `METRIK_GATEWAY_CORROBORATING_RPC_URLS` /
+`METRIK_GATEWAY_MAX_STATE_STALENESS_SECONDS`):
 
 ```bash
 pnpm gateway
@@ -298,8 +302,19 @@ Every request must carry a valid capability; every failure mode (missing header,
 signature, wrong buyer, closed/expired/underfunded stream, replayed nonce, wrong
 method/path, wrong `serviceRef`) is rejected with a distinct machine-readable `reason`
 and a `402`/`403` - the real upstream is never touched on a rejection. Access is revoked
-automatically: once a stream is closed, expired, or reclaimed, the next on-chain read
-fails closed with no extra bookkeeping.
+automatically: once a stream is closed, expired, or reclaimed, the on-chain read fails
+closed with no extra bookkeeping.
+
+Stream state is never trusted from a single unverified view. Every configured RPC view is
+read per request (in parallel, at most one read each) and a request is authorized only if
+**every** view authorizes - so a stale view cannot keep serving a stream the buyer just
+closed. A view reporting a chain head older than
+`METRIK_GATEWAY_MAX_STATE_STALENESS_SECONDS` (default 30) is rejected outright
+(`stream-state-stale`), and because `close`/expiry/full-claim are irreversible on-chain,
+an observed terminal state is remembered for the process lifetime - a later stale
+`active` read can never re-authorize. Set
+`METRIK_GATEWAY_CORROBORATING_RPC_URLS` to one or more **independent** providers to
+collapse the post-close window to the freshest of them.
 
 **Buyer side** - after `hireVerifiedService`/`open()`, call the purchased service
 directly:

package/dist/discovery/registry.d.ts

@@ -1,28 +1,44 @@
-import { type SignedServiceBinding, type SignedServiceDescriptor } from "@absol-labs/shared";
+import { RegistryUnavailableError, type DiscoverResult, type DiscoveredService } from "@absol-labs/sdk";
+import type { SignedServiceBinding, SignedServiceDescriptor } from "@absol-labs/shared";
 /**
  * Service discovery for the Metrik verified-service marketplace.
  *
- * Before this module every agent surface (SDK, MCP, framework tools) assumed the
- * caller already knew a seller's `operator` + `serviceRef`. There was no way to
- * DISCOVER a service. {@link discoverServices} closes that gap: it reads the same
- * Supabase `listings` registry the oracle reads and returns typed, VERIFIED
- * listings an agent can hire directly.
+ * ## One implementation, two shapes
+ * The verification and transport logic lives in ONE place: `@absol-labs/sdk`'s
+ * {@link sdkDiscoverServices}. This module is a thin, documented adapter over it
+ * that projects the SDK's richer {@link DiscoveredService} onto the agent layer's
+ * {@link ServiceListing}. Previously both packages shipped their own
+ * `discoverServices` with different defaults and OPPOSITE failure semantics —
+ * the SDK threw on an unreachable registry while this one silently returned a
+ * hardcoded listing. There is now a single trust decision, a single default
+ * endpoint, and a single error type ({@link RegistryUnavailableError}) across
+ * both packages. Need the SDK's full result (tier, verification summary,
+ * `registryAvailable`, `source`, filter notes)? Call
+ * {@link discoverServicesDetailed}, which returns it verbatim.
  *
- * ## Fail-closed trust model
- * The security-critical envelope lives entirely inside each row's `signed_binding`
- * (`{ binding, signature, serviceRef, targetMetadata }`). The flat `service_ref` /
- * `operator` / `public_url` columns are UNSIGNED denormalised copies for querying
- * only — never trusted. A row is DROPPED (and logged) unless BOTH hold:
- *   1. its EIP-712 signature recovers to `binding.operator`; and
- *   2. `deriveServiceRef(binding)` equals the envelope's own `serviceRef`.
- * `discoverServices` therefore NEVER returns an unverifiable listing.
+ * ## Zero configuration
+ * The default read source is {@link DEFAULT_METRIK_PUBLIC_REGISTRY_URL} — the
+ * oracle's public, credential-free, CORS-enabled listings endpoint. A
+ * third-party developer needs no Supabase key and no configuration. (The old
+ * default was a raw Supabase PostgREST URL that `401`s for anyone without
+ * Metrik's anon key.)
  *
- * The unsigned `category` column is carried through as informational metadata only
- * (used for the optional client-side category filter); it is never part of the
- * trust decision.
+ * ## Untrusted transport
+ * The oracle is a TRANSPORT, not an authority. Every row it serves is treated as
+ * an untrusted envelope: schema-validated, its `serviceRef` re-derived from the
+ * signed content, and its operator EIP-712 signature recovered and matched.
+ * Anything that fails is DROPPED, so a compromised registry or oracle can
+ * neither inject a listing nor redirect an invocation URL. Rows dropped this way
+ * are reported through {@link DiscoverServicesOptions.logger}.
+ *
+ * ## Loud failure
+ * An unreachable registry throws {@link RegistryUnavailableError}. It never
+ * degrades to embedded seed data: a hardcoded listing outlives the service it
+ * points at and cannot be revoked without a release, and a caller that reads
+ * "one service" and invokes it has been actively misled.
  */
 /** A verified, hireable service listing. `serviceRef`/`operator`/`publicUrl` are
- * derived from the SIGNED binding, not the unsigned flat columns. */
+ * derived from the SIGNED record, never from unsigned envelope columns. */
 export interface ServiceListing {
     readonly serviceRef: `0x${string}`;
     readonly operator: `0x${string}`;
@@ -32,25 +48,47 @@ export interface ServiceListing {
     readonly accessUrl: string;
     /** The schema-validated and cryptographically verified signed record. */
     readonly signed: SignedServiceBinding | SignedServiceDescriptor;
-    /** Unsigned informational category from the listings row (may be absent). */
+    /** Unsigned informational category from the registry row (may be absent). */
     readonly category: string | null;
-    /** Optional unsigned operator-supplied resolver hints; never used for invocation. */
+    /**
+     * @deprecated No longer populated. The signed-record schema is strict, and the
+     * public discovery endpoint carries no unsigned resolver hints. Retained so
+     * existing code compiles.
+     */
     readonly targetMetadata?: Record<string, string>;
 }
 export interface DiscoverServicesOptions {
-    /** Registry endpoint. Defaults to {@link DEFAULT_METRIK_REGISTRY_URL} (env override:
-     * `METRIK_AGENT_REGISTRY_URL`). Pass the full PostgREST `?select=...&order=...` URL. */
+    /**
+     * Registry endpoint. Defaults to {@link DEFAULT_METRIK_PUBLIC_REGISTRY_URL}
+     * (env override: `METRIK_AGENT_REGISTRY_URL`).
+     *
+     * With no {@link DiscoverServicesOptions.apiKey} this is read as a plain
+     * credential-free `GET` against exactly this URL.
+     *
+     * With an `apiKey` it is read as Supabase/PostgREST, and this must be either a
+     * project base URL (`https://<ref>.supabase.co`, to which `/rest/v1/listings`
+     * is appended) or a URL already ending in `/rest/v1` or `/rest/v1/listings`.
+     * Any query string is stripped — the SDK appends its own `select`/`order`.
+     * Supplying an `apiKey` without setting this explicitly is a configuration
+     * error and throws: the public default is not a PostgREST base, and silently
+     * appending to it would produce a 404 on every read.
+     */
     readonly registryUrl?: string;
-    /** Append the built-in {@link DEMO_SEED_LISTING} when the registry does not already
-     * surface it (empty / unreachable / 401 / just missing), so a zero-config newcomer
-     * still discovers one hireable, verified service. The seed is NOT trusted blindly —
-     * it flows through the SAME fail-closed {@link verifyRow} path as any registry row.
-     * Defaults to `true`. Pass `false` to get only what the registry itself returns. */
+    /**
+     * @deprecated No-op. Discovery no longer ships an embedded seed listing: an
+     * unreachable registry throws {@link RegistryUnavailableError} instead of
+     * quietly serving stale local data.
+     */
     readonly includeDemoSeed?: boolean;
-    /** PostgREST apikey (Supabase anon key). Env override: `METRIK_AGENT_REGISTRY_APIKEY`.
-     * Sent as both the `apikey` header and `Authorization: Bearer`. */
+    /** PostgREST apikey (Supabase anon key) for an authenticated read. Env override:
+     * `METRIK_AGENT_REGISTRY_APIKEY`. Not required — the default endpoint is public. */
     readonly apiKey?: string;
-    /** Optional client-side filter on the unsigned `category` column. */
+    /**
+     * Optional filter on the unsigned `category` column (case-insensitive).
+     * The public discovery endpoint serves signed records only and carries no
+     * category column, so this filter matches nothing there; use it against an
+     * authenticated PostgREST read.
+     */
     readonly category?: string;
     /** Optional cap on the number of verified listings returned. */
     readonly limit?: number;
@@ -58,295 +96,62 @@ export interface DiscoverServicesOptions {
     readonly fetch?: typeof fetch;
     /** Request timeout in milliseconds. Defaults to 5000. */
     readonly timeoutMs?: number;
-    /** Warning sink for dropped rows / registry failures. Defaults to `console`. */
+    /** Warning sink for dropped rows / filter notes. Defaults to `console`. */
     readonly logger?: {
         warn: (...args: unknown[]) => void;
     };
 }
 /**
- * Default Metrik listings registry (Supabase PostgREST). Selects the columns the
- * oracle and the agent both need and orders newest-first.
+ * The oracle's public, credential-free, CORS-enabled discovery endpoint. Serves
+ * operator-signed envelopes verbatim so they can be verified client-side, and
+ * answers an unreachable upstream with `503` and NO `listings` key — precisely so
+ * it cannot be misread as "zero services".
+ */
+export declare const DEFAULT_METRIK_PUBLIC_REGISTRY_URL = "https://oracle.metrik.live/listings";
+/**
+ * @deprecated Renamed to {@link DEFAULT_METRIK_PUBLIC_REGISTRY_URL}. The value
+ * changed in 0.9.0: it used to be a raw Supabase PostgREST URL that `401`s
+ * without Metrik's anon key.
  */
-export declare const DEFAULT_METRIK_REGISTRY_URL = "https://pzvnacjolaipeobmptsb.supabase.co/rest/v1/listings?select=service_ref,operator,public_url,category,signed_binding&order=created_at.desc";
+export declare const DEFAULT_METRIK_REGISTRY_URL = "https://oracle.metrik.live/listings";
 /**
- * `serviceRef` of the built-in verified live-data listing. Kept as a named constant so
- * callers can recognise (and dedupe against) the seeded row.
+ * @deprecated Removed in 0.9.0. The embedded seed listing is gone: it was
+ * unrevocable without a release, and masking an unreachable registry with stale
+ * local data is exactly the bug this package now refuses to ship. Kept as an
+ * empty object so existing imports still compile.
  */
-export declare const LIVE_DATA_SEED_SERVICE_REF: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
-/** @deprecated Use {@link LIVE_DATA_SEED_SERVICE_REF}. */
-export declare const DEMO_SEED_SERVICE_REF: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
+export declare const LIVE_DATA_SEED_LISTING: Record<string, never>;
+/** @deprecated Removed in 0.9.0. See {@link LIVE_DATA_SEED_LISTING}. */
+export declare const DEMO_SEED_LISTING: Record<string, never>;
+/** @deprecated Removed in 0.9.0. There is no seeded listing to identify. */
+export declare const LIVE_DATA_SEED_SERVICE_REF: null;
+/** @deprecated Removed in 0.9.0. See {@link LIVE_DATA_SEED_SERVICE_REF}. */
+export declare const DEMO_SEED_SERVICE_REF: null;
+export { RegistryUnavailableError };
+export type { DiscoverResult, DiscoveredService };
 /**
- * A real, operator-signed live-data listing row embedded so `discoverServices()` returns
- * something hireable with ZERO configuration (no Supabase anon key, no registry URL).
+ * Discover verified services and return the SDK's full {@link DiscoverResult}
+ * (typed listings plus `registryAvailable`, `source`, `matched`, `filteredOut`
+ * and an explanatory `note` when a non-empty source was filtered to nothing).
  *
- * This is PUBLIC data — a signed {@link https://github.com/Absol-Labs | Metrik}
- * ServiceBinding — safe to ship in source. It is **NOT** a trust bypass: when seeded
- * it is fed through the exact same fail-closed {@link verifyRow} path as any registry
- * row, so it only ever surfaces if BOTH its EIP-712 signature recovers to
- * `binding.operator` AND `deriveServiceRef(binding)` equals its `serviceRef`. Tamper
- * with any field here and the seed silently drops itself, identically to a bad
- * registry row. The `category` column is unsigned informational metadata only.
+ * Throws {@link RegistryUnavailableError} when the configured read source cannot
+ * be read at all.
  */
-export declare const LIVE_DATA_SEED_LISTING: {
-    readonly service_ref: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
-    readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
-    readonly public_url: "https://livedata.137.23.50.249.sslip.io";
-    readonly category: "live-data";
-    readonly signed_binding: {
-        readonly serviceRef: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
-        readonly descriptor: {
-            readonly version: 3;
-            readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
-            readonly publicUrl: "https://livedata.137.23.50.249.sslip.io";
-            readonly issuedAt: 1787772057;
-            readonly interface: {
-                readonly baseUrl: "https://livedata.137.23.50.249.sslip.io";
-                readonly healthPath: "/health";
-                readonly endpoints: readonly [{
-                    readonly name: "health";
-                    readonly path: "/health";
-                    readonly method: "GET";
-                    readonly description: "Liveness probe.";
-                }, {
-                    readonly name: "readiness";
-                    readonly path: "/readiness";
-                    readonly method: "GET";
-                    readonly description: "Non-value dependency readiness backed by the same real BTC cache policy.";
-                }, {
-                    readonly name: "price";
-                    readonly path: "/price";
-                    readonly method: "GET";
-                    readonly description: "Real live crypto spot price (?symbol=BTC|ETH|SOL) from CoinGecko's public API.";
-                }];
-                readonly authModel: "caller-auth";
-                readonly example: {
-                    readonly endpoint: "price";
-                    readonly request: {
-                        readonly symbol: "BTC";
-                    };
-                    readonly response: {
-                        readonly symbol: "BTC";
-                        readonly source: "coingecko-public-api";
-                    };
-                    readonly description: "Real, nondeterministic live price — no re-execution guarantee.";
-                };
-                readonly expectedStatuses: readonly [200];
-            };
-            readonly verification: {
-                readonly canaries: readonly [{
-                    readonly path: "/readiness";
-                    readonly method: "GET";
-                    readonly matcher: {
-                        readonly type: "json-field-equals";
-                        readonly field: "source";
-                        readonly expected: "coingecko-public-api";
-                    };
-                    readonly nonce: {
-                        readonly inject: {
-                            readonly in: "query";
-                            readonly name: "nonce";
-                        };
-                        readonly echo: {
-                            readonly from: "json-path";
-                            readonly path: "nonce";
-                        };
-                    };
-                }, {
-                    readonly path: "/canary";
-                    readonly method: "GET";
-                    readonly matcher: {
-                        readonly type: "includes";
-                        readonly expected: "metrik-canary:live-data:";
-                    };
-                    readonly nonce: {
-                        readonly inject: {
-                            readonly in: "query";
-                            readonly name: "nonce";
-                        };
-                        readonly echo: {
-                            readonly from: "json-path";
-                            readonly path: "nonce";
-                        };
-                    };
-                }];
-                readonly schema: {
-                    readonly path: "/readiness?nonce=metrik-schema";
-                    readonly required: readonly [{
-                        readonly pointer: "ready";
-                        readonly type: "boolean";
-                    }, {
-                        readonly pointer: "source";
-                        readonly type: "string";
-                        readonly nonEmpty: true;
-                    }, {
-                        readonly pointer: "fetchedAt";
-                        readonly type: "string";
-                        readonly nonEmpty: true;
-                    }, {
-                        readonly pointer: "priceAgeMs";
-                        readonly type: "number";
-                    }, {
-                        readonly pointer: "freshness";
-                        readonly type: "string";
-                        readonly nonEmpty: true;
-                    }];
-                };
-                readonly sla: {
-                    readonly maxLatencyMs: 5000;
-                    readonly freshnessSeconds: 60;
-                };
-            };
-            readonly commercial: {
-                readonly minRatePerSecond: "100";
-                readonly maxRatePerSecond: "10000";
-                readonly currency: "USDC";
-                readonly slaDescription: "Failed or unproven intervals do not advance verified cumulative entitlement; the stream remains active until buyer close or expiry.";
-                readonly refundPolicy: "The buyer reclaims unspent escrow using the latest checkpoint after close/expiry, or the unverified escape path after its grace window.";
-            };
-            readonly access: "gated";
-            readonly callerAuth: {
-                readonly mechanism: "on-chain";
-                readonly role: "buyer";
-                readonly accessUrl: "https://gateway.137.23.50.249.sslip.io";
-            };
-        };
-        readonly signature: "0x2f4d2784eb40b1542517bc19f12534fb2e97da4ade5a3ff56193fcfb97fbef921309f77af3445e336cb07a4379011b080bba700033a098f672b0b2f096197f161b";
-    };
-};
-/** @deprecated Use {@link LIVE_DATA_SEED_LISTING}. */
-export declare const DEMO_SEED_LISTING: {
-    readonly service_ref: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
-    readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
-    readonly public_url: "https://livedata.137.23.50.249.sslip.io";
-    readonly category: "live-data";
-    readonly signed_binding: {
-        readonly serviceRef: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
-        readonly descriptor: {
-            readonly version: 3;
-            readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
-            readonly publicUrl: "https://livedata.137.23.50.249.sslip.io";
-            readonly issuedAt: 1787772057;
-            readonly interface: {
-                readonly baseUrl: "https://livedata.137.23.50.249.sslip.io";
-                readonly healthPath: "/health";
-                readonly endpoints: readonly [{
-                    readonly name: "health";
-                    readonly path: "/health";
-                    readonly method: "GET";
-                    readonly description: "Liveness probe.";
-                }, {
-                    readonly name: "readiness";
-                    readonly path: "/readiness";
-                    readonly method: "GET";
-                    readonly description: "Non-value dependency readiness backed by the same real BTC cache policy.";
-                }, {
-                    readonly name: "price";
-                    readonly path: "/price";
-                    readonly method: "GET";
-                    readonly description: "Real live crypto spot price (?symbol=BTC|ETH|SOL) from CoinGecko's public API.";
-                }];
-                readonly authModel: "caller-auth";
-                readonly example: {
-                    readonly endpoint: "price";
-                    readonly request: {
-                        readonly symbol: "BTC";
-                    };
-                    readonly response: {
-                        readonly symbol: "BTC";
-                        readonly source: "coingecko-public-api";
-                    };
-                    readonly description: "Real, nondeterministic live price — no re-execution guarantee.";
-                };
-                readonly expectedStatuses: readonly [200];
-            };
-            readonly verification: {
-                readonly canaries: readonly [{
-                    readonly path: "/readiness";
-                    readonly method: "GET";
-                    readonly matcher: {
-                        readonly type: "json-field-equals";
-                        readonly field: "source";
-                        readonly expected: "coingecko-public-api";
-                    };
-                    readonly nonce: {
-                        readonly inject: {
-                            readonly in: "query";
-                            readonly name: "nonce";
-                        };
-                        readonly echo: {
-                            readonly from: "json-path";
-                            readonly path: "nonce";
-                        };
-                    };
-                }, {
-                    readonly path: "/canary";
-                    readonly method: "GET";
-                    readonly matcher: {
-                        readonly type: "includes";
-                        readonly expected: "metrik-canary:live-data:";
-                    };
-                    readonly nonce: {
-                        readonly inject: {
-                            readonly in: "query";
-                            readonly name: "nonce";
-                        };
-                        readonly echo: {
-                            readonly from: "json-path";
-                            readonly path: "nonce";
-                        };
-                    };
-                }];
-                readonly schema: {
-                    readonly path: "/readiness?nonce=metrik-schema";
-                    readonly required: readonly [{
-                        readonly pointer: "ready";
-                        readonly type: "boolean";
-                    }, {
-                        readonly pointer: "source";
-                        readonly type: "string";
-                        readonly nonEmpty: true;
-                    }, {
-                        readonly pointer: "fetchedAt";
-                        readonly type: "string";
-                        readonly nonEmpty: true;
-                    }, {
-                        readonly pointer: "priceAgeMs";
-                        readonly type: "number";
-                    }, {
-                        readonly pointer: "freshness";
-                        readonly type: "string";
-                        readonly nonEmpty: true;
-                    }];
-                };
-                readonly sla: {
-                    readonly maxLatencyMs: 5000;
-                    readonly freshnessSeconds: 60;
-                };
-            };
-            readonly commercial: {
-                readonly minRatePerSecond: "100";
-                readonly maxRatePerSecond: "10000";
-                readonly currency: "USDC";
-                readonly slaDescription: "Failed or unproven intervals do not advance verified cumulative entitlement; the stream remains active until buyer close or expiry.";
-                readonly refundPolicy: "The buyer reclaims unspent escrow using the latest checkpoint after close/expiry, or the unverified escape path after its grace window.";
-            };
-            readonly access: "gated";
-            readonly callerAuth: {
-                readonly mechanism: "on-chain";
-                readonly role: "buyer";
-                readonly accessUrl: "https://gateway.137.23.50.249.sslip.io";
-            };
-        };
-        readonly signature: "0x2f4d2784eb40b1542517bc19f12534fb2e97da4ade5a3ff56193fcfb97fbef921309f77af3445e336cb07a4379011b080bba700033a098f672b0b2f096197f161b";
-    };
-};
+export declare function discoverServicesDetailed(opts?: DiscoverServicesOptions): Promise<DiscoverResult>;
 /**
  * Discover verified services from the Metrik listings registry.
  *
- * Fail-closed: any row whose signed binding is malformed, whose signature does not
- * recover to its operator, or whose `serviceRef` does not match `deriveServiceRef`
- * is dropped and logged. Degrades gracefully: any network/registry failure returns
- * `[]` (with a logged warning) rather than throwing to the caller.
+ * Zero configuration: reads {@link DEFAULT_METRIK_PUBLIC_REGISTRY_URL}, the
+ * oracle's credential-free public endpoint.
+ *
+ * Fail-closed: every row is schema-validated, its `serviceRef` re-derived and
+ * its operator signature recovered; anything that fails is dropped and logged,
+ * so an unverifiable listing is never returned.
+ *
+ * LOUD, not silent: an unreachable / erroring / non-200 registry throws
+ * {@link RegistryUnavailableError} rather than returning `[]` or embedded seed
+ * data. Catch it if your caller can genuinely handle "the marketplace was never
+ * reached" — but do not confuse it with an empty marketplace.
  */
 export declare function discoverServices(opts?: DiscoverServicesOptions): Promise<ServiceListing[]>;
 //# sourceMappingURL=registry.d.ts.map

package/dist/discovery/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/discovery/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;qEACqE;AACrE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,uBAAuB,CAAC;IAChE,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC;4FACwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;wFAIoF;IACpF,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;uEACmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC1D;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,mJAC0G,CAAC;AAInJ;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EACrC,oEAA6E,CAAC;AAChF,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,sEAA6B,CAAC;AAEhE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0GzB,CAAC;AACX,sDAAsD;AACtD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAyB,CAAC;AA+CxD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CA6E3B"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/discovery/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAExB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAGvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;2EAC2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,uBAAuB,CAAC;IAChE,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;wFACoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC1D;AAED;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,wCACR,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,wCAAqC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAqB,CAAC;AAC/E,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAA0B,CAAC;AAC/E,4EAA4E;AAC5E,eAAO,MAAM,0BAA0B,EAAE,IAAW,CAAC;AACrD,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,EAAE,IAAW,CAAC;AAIhD,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,cAAc,CAAC,CAoBzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CAqB3B"}