@adcp/sdk 9.2.2 → 9.3.0

package/dist/lib/registry/feed-stream.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Server-Sent Events transport for the registry change feed
+ * (`GET /api/registry/feed/stream`, adcp#5733).
+ *
+ * Generated OpenAPI types alone are not enough because the response is
+ * `text/event-stream`. This module provides a fetch-based SSE reader (so it can
+ * carry the `Authorization` bearer and run under Node) plus the typed message
+ * and error shapes the stream emits.
+ *
+ * The stream carries the resume cursor in the JSON `data.cursor` payload, not in
+ * SSE `id:` / `Last-Event-ID` (the registry does not use native EventSource
+ * resume in 3.x). Consumers persist `data.cursor` and reconnect with `?cursor=`.
+ */
+import type { FeedResponse, FeedFreshness } from './types.generated';
+/** Query parameters for `GET /api/registry/feed/stream`. */
+export interface FeedStreamQuery {
+    /** Resume after this event id. Omit to start at the beginning of retention. */
+    cursor?: string;
+    /** Comma-separated event type filters with glob support (e.g. `authorization.*`). */
+    types?: string;
+    /** Max events per SSE feed page (default 100, max 10,000). */
+    limit?: number;
+    /** Server-side interval while caught up (5–60s, default 15). Backlog pages are sent without waiting. */
+    pollIntervalSeconds?: number;
+}
+/** `heartbeat` event payload. Emitted while caught up; does not advance the cursor. */
+export interface FeedHeartbeat {
+    generated_at: string;
+    cursor: string | null;
+    freshness?: FeedFreshness;
+}
+/** `error` event payload. Sent once before the server closes the stream. */
+export interface FeedStreamErrorData {
+    /** e.g. `cursor_expired`, `feed_stream_error`. */
+    error: string;
+    message?: string;
+}
+/**
+ * A typed message decoded from the SSE stream.
+ *
+ * @remarks
+ * Registry-supplied strings (event payloads, `freshness`, `error.message`) are
+ * untrusted input. Sanitize before logging them or injecting them into LLM
+ * prompts/instructions or other executable context.
+ */
+export type FeedStreamMessage = {
+    type: 'feed';
+    page: FeedResponse;
+} | {
+    type: 'heartbeat';
+    heartbeat: FeedHeartbeat;
+} | {
+    type: 'error';
+    error: FeedStreamErrorData;
+};
+/** Base class for feed-stream transport failures. */
+export declare class FeedStreamError extends Error {
+    constructor(message: string);
+}
+/**
+ * The stream endpoint is unavailable (404/406/501) or did not return an event
+ * stream (proxy returned HTML/JSON). Callers in `auto` mode fall back to polling.
+ */
+export declare class FeedStreamUnsupportedError extends FeedStreamError {
+    readonly status: number | undefined;
+    constructor(message: string, status?: number);
+}
+/** The initial cursor is expired (HTTP 410). Callers re-bootstrap then resume. */
+export declare class FeedStreamCursorExpiredError extends FeedStreamError {
+    constructor(message: string);
+}
+/** A non-success HTTP status that is neither unsupported nor cursor-expired (e.g. 429, 500). */
+export declare class FeedStreamHttpError extends FeedStreamError {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+/** A feed/heartbeat/error frame carried data that was not valid JSON or had the wrong shape. */
+export declare class FeedStreamParseError extends FeedStreamError {
+    constructor(message: string);
+}
+interface SseEvent {
+    event: string;
+    data: string;
+}
+/**
+ * Default cap on a single un-dispatched SSE event before the parser fails
+ * closed. Measured in UTF-16 code units (an approximate byte bound — JS string
+ * length, which tracks heap cost). Generous enough for a full feed page (the
+ * JSON feed endpoint caps responses at ~2 MiB) while bounding memory against a
+ * hostile or buggy stream that never emits a blank line.
+ */
+export declare const DEFAULT_MAX_SSE_FRAME_BYTES: number;
+/**
+ * Parse an SSE byte stream into events. Follows the WHATWG event-stream rules:
+ * comments (`:`-prefixed) are ignored, `data` lines accumulate (joined by `\n`),
+ * a blank line dispatches the buffered event, and a final block with no trailing
+ * blank line is dropped as incomplete (so a partially-transferred page is never
+ * surfaced).
+ *
+ * The in-progress line plus accumulated `data` lines for a single event are
+ * bounded by `maxFrameBytes`; a stream that exceeds it (no line terminator, or
+ * an unbounded run of `data:` lines before a blank line) throws
+ * {@link FeedStreamParseError} rather than growing memory without limit — the
+ * JSON feed path enforces the same fail-closed posture via its body-size cap.
+ *
+ * Parsing is O(n) regardless of how the bytes are chunked: each decoded chunk is
+ * scanned once, and an un-terminated line is held as a list of fragments joined
+ * only when it completes — never re-scanning or re-flattening a growing buffer.
+ */
+export declare function parseSseStream(source: AsyncIterable<Uint8Array> | ReadableStream<Uint8Array>, options?: {
+    maxFrameBytes?: number;
+}): AsyncGenerator<SseEvent>;
+/**
+ * Escape control characters and bound the length of a registry-supplied string
+ * before it is embedded in an Error message or logged. Registry/proxy text is
+ * untrusted input — left raw it is a log-injection / terminal-spoofing vector
+ * (and the repo treats registry strings as untrusted everywhere else). Mirrors
+ * the JSON client's `preview()`.
+ */
+export declare function sanitizeStreamText(text: string, maxChars?: number): string;
+export interface OpenFeedStreamOptions {
+    fetchImpl: typeof globalThis.fetch;
+    baseUrl: string;
+    apiKey: string;
+    query?: FeedStreamQuery;
+    /**
+     * Redirect policy for the stream fetch. Defaults to `'error'`, which prevents
+     * the `Authorization` bearer from being replayed to a redirect target. Set
+     * `'follow'` only with a fully trusted `baseUrl` — fetch may forward the bearer
+     * to the redirect location.
+     */
+    redirect?: 'follow' | 'error';
+    /** Cap on bytes buffered for a single un-dispatched SSE event. See {@link DEFAULT_MAX_SSE_FRAME_BYTES}. */
+    maxFrameBytes?: number;
+    signal?: AbortSignal;
+}
+/**
+ * Open the SSE feed stream and yield typed messages until the stream closes.
+ *
+ * Throws {@link FeedStreamCursorExpiredError} (410), {@link FeedStreamUnsupportedError}
+ * (404/406/501 or non-stream content-type), {@link FeedStreamHttpError} (other
+ * non-2xx), or {@link FeedStreamParseError} (malformed frame). Network/abort
+ * errors propagate from the underlying fetch.
+ */
+export declare function openFeedStream(opts: OpenFeedStreamOptions): AsyncGenerator<FeedStreamMessage>;
+export {};
+//# sourceMappingURL=feed-stream.d.ts.map

package/dist/lib/registry/feed-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-stream.d.ts","sourceRoot":"","sources":["../../../src/lib/registry/feed-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAErE,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wGAAwG;IACxG,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,uFAAuF;AACvF,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAIlD,qDAAqD;AACrD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,eAAe;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAK7C;AAED,kFAAkF;AAClF,qBAAa,4BAA6B,SAAQ,eAAe;gBACnD,OAAO,EAAE,MAAM;CAI5B;AAED,gGAAgG;AAChG,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,gGAAgG;AAChG,qBAAa,oBAAqB,SAAQ,eAAe;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAID,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAmED;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,QAAmB,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAuB,cAAc,CACnC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,EAC9D,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC,cAAc,CAAC,QAAQ,CAAC,CAsD1B;AA8CD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAA0B,GAAG,MAAM,CAK3F;AAmED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC9B,2GAA2G;IAC3G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAuB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAyCpG"}

package/dist/lib/registry/feed-stream.js

@@ -0,0 +1,378 @@
+"use strict";
+/**
+ * Server-Sent Events transport for the registry change feed
+ * (`GET /api/registry/feed/stream`, adcp#5733).
+ *
+ * Generated OpenAPI types alone are not enough because the response is
+ * `text/event-stream`. This module provides a fetch-based SSE reader (so it can
+ * carry the `Authorization` bearer and run under Node) plus the typed message
+ * and error shapes the stream emits.
+ *
+ * The stream carries the resume cursor in the JSON `data.cursor` payload, not in
+ * SSE `id:` / `Last-Event-ID` (the registry does not use native EventSource
+ * resume in 3.x). Consumers persist `data.cursor` and reconnect with `?cursor=`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MAX_SSE_FRAME_BYTES = exports.FeedStreamParseError = exports.FeedStreamHttpError = exports.FeedStreamCursorExpiredError = exports.FeedStreamUnsupportedError = exports.FeedStreamError = void 0;
+exports.parseSseStream = parseSseStream;
+exports.sanitizeStreamText = sanitizeStreamText;
+exports.openFeedStream = openFeedStream;
+// ====== Errors ======
+/** Base class for feed-stream transport failures. */
+class FeedStreamError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'FeedStreamError';
+    }
+}
+exports.FeedStreamError = FeedStreamError;
+/**
+ * The stream endpoint is unavailable (404/406/501) or did not return an event
+ * stream (proxy returned HTML/JSON). Callers in `auto` mode fall back to polling.
+ */
+class FeedStreamUnsupportedError extends FeedStreamError {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = 'FeedStreamUnsupportedError';
+        this.status = status;
+    }
+}
+exports.FeedStreamUnsupportedError = FeedStreamUnsupportedError;
+/** The initial cursor is expired (HTTP 410). Callers re-bootstrap then resume. */
+class FeedStreamCursorExpiredError extends FeedStreamError {
+    constructor(message) {
+        super(message);
+        this.name = 'FeedStreamCursorExpiredError';
+    }
+}
+exports.FeedStreamCursorExpiredError = FeedStreamCursorExpiredError;
+/** A non-success HTTP status that is neither unsupported nor cursor-expired (e.g. 429, 500). */
+class FeedStreamHttpError extends FeedStreamError {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = 'FeedStreamHttpError';
+        this.status = status;
+    }
+}
+exports.FeedStreamHttpError = FeedStreamHttpError;
+/** A feed/heartbeat/error frame carried data that was not valid JSON or had the wrong shape. */
+class FeedStreamParseError extends FeedStreamError {
+    constructor(message) {
+        super(message);
+        this.name = 'FeedStreamParseError';
+    }
+}
+exports.FeedStreamParseError = FeedStreamParseError;
+/**
+ * Apply one SSE line to the accumulation state. Returns an event to yield when a
+ * blank line dispatches a buffered event with data, else null. Follows the
+ * WHATWG rules: `:`-prefixed comments ignored, one leading space stripped from
+ * each value, `id`/`retry` ignored (the registry uses `data.cursor`, not
+ * Last-Event-ID).
+ *
+ * Throws {@link FeedStreamParseError} as soon as accumulated `data` exceeds
+ * `maxFrameBytes` — before the dispatching blank line — so an oversized frame is
+ * never yielded (or JSON-parsed downstream), even when the whole frame, blank
+ * line included, arrives in a single chunk.
+ */
+function feedLine(line, st, maxFrameBytes) {
+    if (line === '') {
+        const ev = st.dataLines.length > 0 ? { event: st.eventType || 'message', data: st.dataLines.join('\n') } : null;
+        st.dataLines = [];
+        st.dataBytes = 0;
+        st.eventType = '';
+        return ev;
+    }
+    if (line[0] === ':')
+        return null; // comment
+    const colon = line.indexOf(':');
+    const field = colon === -1 ? line : line.slice(0, colon);
+    let value = colon === -1 ? '' : line.slice(colon + 1);
+    if (value[0] === ' ')
+        value = value.slice(1);
+    if (field === 'event')
+        st.eventType = value;
+    else if (field === 'data') {
+        st.dataLines.push(value);
+        st.dataBytes += value.length;
+        if (st.dataBytes > maxFrameBytes) {
+            throw new FeedStreamParseError(`registry feed stream event exceeded ${maxFrameBytes} bytes without dispatching`);
+        }
+    }
+    return null;
+}
+function asAsyncIterable(source) {
+    if (Symbol.asyncIterator in source) {
+        return source;
+    }
+    const reader = source.getReader();
+    return {
+        [Symbol.asyncIterator]() {
+            return {
+                async next() {
+                    const { done, value } = await reader.read();
+                    return done ? { done: true, value: undefined } : { done: false, value: value };
+                },
+                async return() {
+                    await reader.cancel().catch(() => { });
+                    reader.releaseLock();
+                    return { done: true, value: undefined };
+                },
+            };
+        },
+    };
+}
+/**
+ * Default cap on a single un-dispatched SSE event before the parser fails
+ * closed. Measured in UTF-16 code units (an approximate byte bound — JS string
+ * length, which tracks heap cost). Generous enough for a full feed page (the
+ * JSON feed endpoint caps responses at ~2 MiB) while bounding memory against a
+ * hostile or buggy stream that never emits a blank line.
+ */
+exports.DEFAULT_MAX_SSE_FRAME_BYTES = 16 * 1024 * 1024;
+/**
+ * Parse an SSE byte stream into events. Follows the WHATWG event-stream rules:
+ * comments (`:`-prefixed) are ignored, `data` lines accumulate (joined by `\n`),
+ * a blank line dispatches the buffered event, and a final block with no trailing
+ * blank line is dropped as incomplete (so a partially-transferred page is never
+ * surfaced).
+ *
+ * The in-progress line plus accumulated `data` lines for a single event are
+ * bounded by `maxFrameBytes`; a stream that exceeds it (no line terminator, or
+ * an unbounded run of `data:` lines before a blank line) throws
+ * {@link FeedStreamParseError} rather than growing memory without limit — the
+ * JSON feed path enforces the same fail-closed posture via its body-size cap.
+ *
+ * Parsing is O(n) regardless of how the bytes are chunked: each decoded chunk is
+ * scanned once, and an un-terminated line is held as a list of fragments joined
+ * only when it completes — never re-scanning or re-flattening a growing buffer.
+ */
+async function* parseSseStream(source, options) {
+    const maxFrameBytes = options?.maxFrameBytes ?? exports.DEFAULT_MAX_SSE_FRAME_BYTES;
+    const decoder = new TextDecoder();
+    const st = { dataLines: [], dataBytes: 0, eventType: '' };
+    // Fragments of the current un-terminated line, spanning chunks; joined once
+    // when the line completes.
+    let lineFragments = [];
+    let lineFragmentsLen = 0;
+    // A `\r` ended the previous chunk; a leading `\n` here is the LF of that CRLF
+    // and must be skipped (the line already terminated at the `\r`).
+    let skipLeadingLF = false;
+    for await (const chunk of asAsyncIterable(source)) {
+        const c = decoder.decode(chunk, { stream: true });
+        if (c.length === 0)
+            continue;
+        let pos = 0;
+        if (skipLeadingLF) {
+            if (c[0] === '\n')
+                pos = 1;
+            skipLeadingLF = false;
+        }
+        while (pos < c.length) {
+            // Scan only this (small) chunk for the next terminator — never the
+            // accumulated frame — so indexing stays on a flat, short string.
+            let j = pos;
+            while (j < c.length && c[j] !== '\n' && c[j] !== '\r')
+                j += 1;
+            if (j === c.length)
+                break; // no terminator in the rest of this chunk
+            lineFragments.push(c.slice(pos, j));
+            const line = lineFragments.length === 1 ? lineFragments[0] : lineFragments.join('');
+            lineFragments = [];
+            lineFragmentsLen = 0;
+            const ev = feedLine(line, st, maxFrameBytes);
+            if (ev)
+                yield ev;
+            if (c[j] === '\r') {
+                if (j === c.length - 1) {
+                    skipLeadingLF = true; // defer the CRLF check to the next chunk
+                    pos = c.length;
+                }
+                else {
+                    pos = c[j + 1] === '\n' ? j + 2 : j + 1;
+                }
+            }
+            else {
+                pos = j + 1;
+            }
+        }
+        if (pos < c.length) {
+            const tail = c.slice(pos);
+            lineFragments.push(tail);
+            lineFragmentsLen += tail.length;
+        }
+        // Fail closed if a single un-dispatched event grows past the cap, whether
+        // from an unterminated line or an unbounded run of data lines.
+        if (lineFragmentsLen + st.dataBytes > maxFrameBytes) {
+            throw new FeedStreamParseError(`registry feed stream event exceeded ${maxFrameBytes} bytes without dispatching`);
+        }
+    }
+}
+// ====== Frame → typed message ======
+function parseJsonFrame(event, data) {
+    try {
+        return JSON.parse(data);
+    }
+    catch {
+        throw new FeedStreamParseError(`registry feed stream sent malformed JSON on '${event}' event`);
+    }
+}
+function toFeedStreamMessage(evt) {
+    switch (evt.event) {
+        case 'feed': {
+            const page = parseJsonFrame('feed', evt.data);
+            if (!page || typeof page !== 'object' || !Array.isArray(page.events)) {
+                throw new FeedStreamParseError("registry feed stream 'feed' event was not a feed page");
+            }
+            return { type: 'feed', page: page };
+        }
+        case 'heartbeat': {
+            const heartbeat = parseJsonFrame('heartbeat', evt.data);
+            if (!heartbeat || typeof heartbeat !== 'object') {
+                throw new FeedStreamParseError("registry feed stream 'heartbeat' event was not an object");
+            }
+            return { type: 'heartbeat', heartbeat: heartbeat };
+        }
+        case 'error': {
+            const error = parseJsonFrame('error', evt.data);
+            if (!error || typeof error !== 'object' || typeof error.error !== 'string') {
+                throw new FeedStreamParseError("registry feed stream 'error' event had no error code");
+            }
+            return { type: 'error', error: error };
+        }
+        default:
+            // Unknown / `message` events (e.g. comments-as-keepalive frames) are ignored.
+            return null;
+    }
+}
+// ====== Connection ======
+const ERROR_BODY_LIMIT_BYTES = 64 * 1024;
+const ERROR_MESSAGE_MAX_CHARS = 256;
+/**
+ * Escape control characters and bound the length of a registry-supplied string
+ * before it is embedded in an Error message or logged. Registry/proxy text is
+ * untrusted input — left raw it is a log-injection / terminal-spoofing vector
+ * (and the repo treats registry strings as untrusted everywhere else). Mirrors
+ * the JSON client's `preview()`.
+ */
+function sanitizeStreamText(text, maxChars = ERROR_MESSAGE_MAX_CHARS) {
+    // Match C0 controls (\u0000-\u001f) and DEL (\u007f); built from a string so
+    // the source never carries raw control bytes.
+    const CONTROL = new RegExp('[\\u0000-\\u001f\\u007f]', 'g');
+    return text.slice(0, maxChars).replace(CONTROL, ch => `\\u${ch.charCodeAt(0).toString(16).padStart(4, '0')}`);
+}
+function buildStreamUrl(baseUrl, query) {
+    const params = new URLSearchParams();
+    if (query?.cursor)
+        params.set('cursor', query.cursor);
+    if (query?.types)
+        params.set('types', query.types);
+    if (query?.limit != null)
+        params.set('limit', String(query.limit));
+    if (query?.pollIntervalSeconds != null)
+        params.set('poll_interval_seconds', String(query.pollIntervalSeconds));
+    const qs = params.toString();
+    return `${baseUrl}/api/registry/feed/stream${qs ? `?${qs}` : ''}`;
+}
+/** Read at most `maxBytes` of a response body, then cancel — never buffers a hostile multi-GB error body. */
+async function readBoundedText(res, maxBytes) {
+    const reader = res.body?.getReader();
+    if (!reader) {
+        // No stream (e.g. a mocked Response): fall back, but still bound the result.
+        const text = await res.text().catch(() => '');
+        return text.slice(0, maxBytes);
+    }
+    const chunks = [];
+    let total = 0;
+    try {
+        while (total < maxBytes) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (value) {
+                chunks.push(value);
+                total += value.byteLength;
+            }
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+        reader.releaseLock();
+    }
+    return new TextDecoder().decode(concatChunks(chunks)).slice(0, maxBytes);
+}
+function concatChunks(chunks) {
+    let total = 0;
+    for (const c of chunks)
+        total += c.byteLength;
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        out.set(c, offset);
+        offset += c.byteLength;
+    }
+    return out;
+}
+async function readErrorMessage(res) {
+    try {
+        const trimmed = await readBoundedText(res, ERROR_BODY_LIMIT_BYTES);
+        try {
+            const body = JSON.parse(trimmed);
+            if (typeof body.message === 'string')
+                return sanitizeStreamText(body.message);
+            if (typeof body.error === 'string')
+                return sanitizeStreamText(body.error);
+        }
+        catch {
+            /* not JSON */
+        }
+        const tail = trimmed.trim();
+        return tail ? sanitizeStreamText(tail) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Open the SSE feed stream and yield typed messages until the stream closes.
+ *
+ * Throws {@link FeedStreamCursorExpiredError} (410), {@link FeedStreamUnsupportedError}
+ * (404/406/501 or non-stream content-type), {@link FeedStreamHttpError} (other
+ * non-2xx), or {@link FeedStreamParseError} (malformed frame). Network/abort
+ * errors propagate from the underlying fetch.
+ */
+async function* openFeedStream(opts) {
+    const url = buildStreamUrl(opts.baseUrl, opts.query);
+    const res = await opts.fetchImpl(url, {
+        method: 'GET',
+        headers: { Accept: 'text/event-stream', Authorization: `Bearer ${opts.apiKey}` },
+        redirect: opts.redirect ?? 'error',
+        signal: opts.signal,
+    });
+    if (!res.ok) {
+        const message = await readErrorMessage(res);
+        if (res.status === 410) {
+            throw new FeedStreamCursorExpiredError(message ?? 'registry feed cursor expired');
+        }
+        if (res.status === 404 || res.status === 406 || res.status === 501) {
+            throw new FeedStreamUnsupportedError(`registry feed stream unsupported (HTTP ${res.status})${message ? `: ${message}` : ''}`, res.status);
+        }
+        throw new FeedStreamHttpError(`registry feed stream request failed (HTTP ${res.status})${message ? `: ${message}` : ''}`, res.status);
+    }
+    const contentType = res.headers.get('content-type') ?? '';
+    if (!contentType.includes('text/event-stream')) {
+        await res.body?.cancel?.().catch(() => { });
+        throw new FeedStreamUnsupportedError(`registry feed stream returned non-stream content-type: ${contentType || 'none'}`);
+    }
+    if (!res.body) {
+        throw new FeedStreamUnsupportedError('registry feed stream response had no body');
+    }
+    for await (const evt of parseSseStream(res.body, { maxFrameBytes: opts.maxFrameBytes })) {
+        const msg = toFeedStreamMessage(evt);
+        if (msg)
+            yield msg;
+    }
+}
+//# sourceMappingURL=feed-stream.js.map

package/dist/lib/registry/feed-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-stream.js","sourceRoot":"","sources":["../../../src/lib/registry/feed-stream.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AA8LH,wCAyDC;AAqDD,gDAKC;AA4FD,wCAyCC;AA3YD,uBAAuB;AAEvB,qDAAqD;AACrD,MAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED;;;GAGG;AACH,MAAa,0BAA2B,SAAQ,eAAe;IACpD,MAAM,CAAqB;IACpC,YAAY,OAAe,EAAE,MAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAPD,gEAOC;AAED,kFAAkF;AAClF,MAAa,4BAA6B,SAAQ,eAAe;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AALD,oEAKC;AAED,gGAAgG;AAChG,MAAa,mBAAoB,SAAQ,eAAe;IAC7C,MAAM,CAAS;IACxB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAPD,kDAOC;AAED,gGAAgG;AAChG,MAAa,oBAAqB,SAAQ,eAAe;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAgBD;;;;;;;;;;;GAWG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,EAAc,EAAE,aAAqB;IACnE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,IAAI,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChH,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC;QAClB,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,OAAO;QAAE,EAAE,CAAC,SAAS,GAAG,KAAK,CAAC;SACvC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC1B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,EAAE,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAC7B,IAAI,EAAE,CAAC,SAAS,GAAG,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,oBAAoB,CAAC,uCAAuC,aAAa,4BAA4B,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,MAA8D;IACrF,IAAI,MAAM,CAAC,aAAa,IAAK,MAAiB,EAAE,CAAC;QAC/C,OAAO,MAAmC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAI,MAAqC,CAAC,SAAS,EAAE,CAAC;IAClE,OAAO;QACL,CAAC,MAAM,CAAC,aAAa,CAAC;YACpB,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAM,EAAE,CAAC;gBAClF,CAAC;gBACD,KAAK,CAAC,MAAM;oBACV,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACtC,MAAM,CAAC,WAAW,EAAE,CAAC;oBACrB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAC1C,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACU,QAAA,2BAA2B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACI,KAAK,SAAS,CAAC,CAAC,cAAc,CACnC,MAA8D,EAC9D,OAAoC;IAEpC,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,mCAA2B,CAAC;IAC5E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,EAAE,GAAe,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACtE,4EAA4E;IAC5E,2BAA2B;IAC3B,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,8EAA8E;IAC9E,iEAAiE;IACjE,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,GAAG,GAAG,CAAC,CAAC;YAC3B,aAAa,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACtB,mEAAmE;YACnE,iEAAiE;YACjE,IAAI,CAAC,GAAG,GAAG,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;gBAAE,MAAM,CAAC,0CAA0C;YACrE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,aAAa,GAAG,EAAE,CAAC;YACnB,gBAAgB,GAAG,CAAC,CAAC;YACrB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;YAC7C,IAAI,EAAE;gBAAE,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClB,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,aAAa,GAAG,IAAI,CAAC,CAAC,yCAAyC;oBAC/D,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC;QAClC,CAAC;QACD,0EAA0E;QAC1E,+DAA+D;QAC/D,IAAI,gBAAgB,GAAG,EAAE,CAAC,SAAS,GAAG,aAAa,EAAE,CAAC;YACpD,MAAM,IAAI,oBAAoB,CAAC,uCAAuC,aAAa,4BAA4B,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;AACH,CAAC;AAED,sCAAsC;AAEtC,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,gDAAgD,KAAK,SAAS,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAa;IACxC,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,IAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAoB,EAAE,CAAC;QACtD,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChD,MAAM,IAAI,oBAAoB,CAAC,0DAA0D,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,SAA0B,EAAE,CAAC;QACtE,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACpG,MAAM,IAAI,oBAAoB,CAAC,sDAAsD,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,CAAC;QAChE,CAAC;QACD;YACE,8EAA8E;YAC9E,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,2BAA2B;AAE3B,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,IAAY,EAAE,QAAQ,GAAG,uBAAuB;IACjF,6EAA6E;IAC7E,8CAA8C;IAC9C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,KAAuB;IAC9D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,KAAK,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,KAAK,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,EAAE,mBAAmB,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC/G,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,GAAG,OAAO,4BAA4B,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,6GAA6G;AAC7G,KAAK,UAAU,eAAe,CAAC,GAAa,EAAE,QAAgB;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,6EAA6E;QAC7E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,KAAK,GAAG,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2C,CAAC;YAC3E,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAmBD;;;;;;;GAOG;AACI,KAAK,SAAS,CAAC,CAAC,cAAc,CAAC,IAA2B;IAC/D,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;QAChF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,4BAA4B,CAAC,OAAO,IAAI,8BAA8B,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACnE,MAAM,IAAI,0BAA0B,CAClC,0CAA0C,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACvF,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,6CAA6C,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1F,GAAG,CAAC,MAAM,CACX,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,0BAA0B,CAClC,0DAA0D,WAAW,IAAI,MAAM,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,0BAA0B,CAAC,2CAA2C,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;QACxF,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG;YAAE,MAAM,GAAG,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/lib/registry/index.d.ts

@@ -1,8 +1,12 @@
-import type { ResolvedBrand, ResolvedProperty, RegistryClientConfig, SaveBrandRequest, SaveBrandResponse, ListBrandLogosOptions, ListBrandLogosResponse, SaveBrandLogoInput, SaveBrandLogoResponse, UploadBrandLogoInput, UploadBrandLogoResponse, SavePropertyRequest, SavePropertyResponse, BrandRegistryItem, PropertyRegistryItem, ValidationResult, DomainLookupResult, ListBrandsOptions, ListOptions, ListAgentsOptions, ListAgentsResponse, ListPublishersResponse, CreateAdagentsRequest, CreateAdagentsResponse, CommunityMirrorAdagentsConfig, CreateCommunityMirrorAdagentsConfig, CommunityMirrorAdagentsCatalog, PublishCommunityMirrorAdagentsResponse, ListCommunityMirrorAdagentsResponse, DeleteCommunityMirrorAdagentsResponse, PublisherPropertySelector, FindCompanyResult, FeedQuery, FeedResponse, AgentSearchQuery, AgentSearchResponse, CrawlRequestResponse, ListPoliciesQuery, ListPoliciesResponse, ResolvePolicyQuery, ResolvePolicyResponse, ResolvePoliciesBulkRequest, ResolvePoliciesBulkResponse, GetPolicyHistoryQuery, GetPolicyHistoryResponse, SavePolicyRequest, SavePolicyResponse, GetBrandHistoryQuery, GetBrandHistoryResponse, GetPropertyHistoryQuery, GetPropertyHistoryResponse, AgentComplianceDetail, OperatorLookupResult, PublisherLookupResult, GetAgentStoryboardStatusResponse, GetAgentStoryboardStatusBulkResponse } from './types';
-export type { ResolvedBrand, ResolvedProperty, PropertyInfo, RegistryClientConfig, SaveBrandRequest, SaveBrandResponse, BrandLogoReviewStatus, ApprovedBrandLogoAsset, PendingBrandLogoAsset, ReviewedBrandLogoAsset, BrandLogoAsset, ListBrandLogosOptions, ListBrandLogosResponse, SaveBrandLogoInput, SaveBrandLogoResponse, UploadBrandLogoInput, UploadBrandLogoResponse, SavePropertyRequest, SavePropertyResponse, BrandRegistryItem, PropertyRegistryItem, ValidationResult, FederatedAgentWithDetails, FederatedPublisher, DomainLookupResult, ListBrandsOptions, ListOptions, ListAgentsOptions, ListAgentsResponse, ListPublishersResponse, ValidateAdagentsRequest, CreateAdagentsRequest, CreateAdagentsResponse, AdagentsAuthorizedAgent, AdagentsCatalogFormat, AdagentsPlacementDefinition, AdagentsPlacementFormatReference, AdagentsPlacementFormatOption, AdagentsPlacementTag, CreatedAdagentsJson, CommunityMirrorAdagentsConfig, CreateCommunityMirrorAdagentsConfig, CommunityMirrorAdagentsCatalog, PublishCommunityMirrorAdagentsResponse, CommunityMirrorAdagentsSummary, ListCommunityMirrorAdagentsResponse, GetCommunityMirrorAdagentsResponse, PublishCommunityMirrorAdagentsRequest, PublishCommunityMirrorAdagentsError, DeleteCommunityMirrorAdagentsResponse, ValidateProductAuthorizationRequest, ExpandProductIdentifiersRequest, PublisherPropertySelector, CompanySearchResult, FindCompanyResult, FeedQuery, AgentSearchQuery, CrawlRequest, ListPoliciesQuery, ListPoliciesResponse, ResolvePolicyQuery, ResolvePolicyResponse, ResolvePoliciesBulkRequest, ResolvePoliciesBulkResponse, GetPolicyHistoryQuery, GetPolicyHistoryResponse, SavePolicyRequest, SavePolicyResponse, GetBrandHistoryQuery, GetBrandHistoryResponse, GetPropertyHistoryQuery, GetPropertyHistoryResponse, AgentComplianceDetail, StoryboardStatus, OperatorLookupResult, PublisherLookupResult, ComplianceChangedPayload, GetAgentStoryboardStatusResponse, GetAgentStoryboardStatusBulkResponse, } from './types';
+import type { ResolvedBrand, BrandHierarchyResolution, ResolveBrandHierarchyOptions, ResolvedProperty, RegistryClientConfig, SaveBrandRequest, SaveBrandResponse, ListBrandLogosOptions, ListBrandLogosResponse, SaveBrandLogoInput, SaveBrandLogoResponse, UploadBrandLogoInput, UploadBrandLogoResponse, SavePropertyRequest, SavePropertyResponse, BrandRegistryItem, PropertyRegistryItem, ValidationResult, DomainLookupResult, ListBrandsOptions, ListOptions, ListAgentsOptions, ListAgentsResponse, ListPublishersResponse, CreateAdagentsRequest, CreateAdagentsResponse, CommunityMirrorAdagentsConfig, CreateCommunityMirrorAdagentsConfig, CommunityMirrorAdagentsCatalog, PublishCommunityMirrorAdagentsResponse, ListCommunityMirrorAdagentsResponse, DeleteCommunityMirrorAdagentsResponse, PublisherPropertySelector, FindCompanyResult, FeedQuery, FeedResponse, AgentSearchQuery, AgentSearchResponse, CrawlRequestResponse, ManagerRevalidationResponse, ListPoliciesQuery, ListPoliciesResponse, ResolvePolicyQuery, ResolvePolicyResponse, ResolvePoliciesBulkRequest, ResolvePoliciesBulkResponse, GetPolicyHistoryQuery, GetPolicyHistoryResponse, SavePolicyRequest, SavePolicyResponse, GetBrandHistoryQuery, GetBrandHistoryResponse, GetPropertyHistoryQuery, GetPropertyHistoryResponse, AgentComplianceDetail, OperatorLookupResult, PublisherLookupResult, GetAgentStoryboardStatusResponse, GetAgentStoryboardStatusBulkResponse } from './types';
+import type { FeedStreamQuery, FeedStreamMessage } from './feed-stream';
+export type { ResolvedBrand, BrandHierarchyResolution, BrandHierarchyBulkResolution, ResolveBrandHierarchyOptions, ResolvedProperty, PropertyInfo, RegistryClientConfig, SaveBrandRequest, SaveBrandResponse, BrandLogoReviewStatus, ApprovedBrandLogoAsset, PendingBrandLogoAsset, ReviewedBrandLogoAsset, BrandLogoAsset, ListBrandLogosOptions, ListBrandLogosResponse, SaveBrandLogoInput, SaveBrandLogoResponse, UploadBrandLogoInput, UploadBrandLogoResponse, SavePropertyRequest, SavePropertyResponse, BrandRegistryItem, PropertyRegistryItem, ValidationResult, FederatedAgentWithDetails, FederatedPublisher, DomainLookupResult, ListBrandsOptions, ListOptions, ListAgentsOptions, ListAgentsResponse, ListPublishersResponse, ValidateAdagentsRequest, CreateAdagentsRequest, CreateAdagentsResponse, AdagentsAuthorizedAgent, AdagentsCatalogFormat, AdagentsPlacementDefinition, AdagentsPlacementFormatReference, AdagentsPlacementFormatOption, AdagentsPlacementTag, CreatedAdagentsJson, CommunityMirrorAdagentsConfig, CreateCommunityMirrorAdagentsConfig, CommunityMirrorAdagentsCatalog, PublishCommunityMirrorAdagentsResponse, CommunityMirrorAdagentsSummary, ListCommunityMirrorAdagentsResponse, GetCommunityMirrorAdagentsResponse, PublishCommunityMirrorAdagentsRequest, PublishCommunityMirrorAdagentsError, DeleteCommunityMirrorAdagentsResponse, ValidateProductAuthorizationRequest, ExpandProductIdentifiersRequest, PublisherPropertySelector, CompanySearchResult, FindCompanyResult, FeedQuery, AgentSearchQuery, CrawlRequest, ManagerRevalidationRequest, ManagerRevalidationResponse, ListPoliciesQuery, ListPoliciesResponse, ResolvePolicyQuery, ResolvePolicyResponse, ResolvePoliciesBulkRequest, ResolvePoliciesBulkResponse, GetPolicyHistoryQuery, GetPolicyHistoryResponse, SavePolicyRequest, SavePolicyResponse, GetBrandHistoryQuery, GetBrandHistoryResponse, GetPropertyHistoryQuery, GetPropertyHistoryResponse, AgentComplianceDetail, StoryboardStatus, OperatorLookupResult, PublisherLookupResult, ComplianceChangedPayload, GetAgentStoryboardStatusResponse, GetAgentStoryboardStatusBulkResponse, } from './types';
 export type { paths, operations, components, LocalizedName, PropertyIdentifier, RegistryError, AgentCompliance, AgentHealth, AgentStats, AgentCapabilities, PropertySummary, CatalogEvent, FeedResponse, AgentInventoryProfile, AgentSearchResult, AgentSearchResponse, CrawlRequestResponse, AuthorizationEntry, BrandActivity, PropertyActivity, PolicySummary, Policy, PolicyHistory, CommunityMirrorListResponse, CommunityMirrorSummary, CommunityMirrorGetResponse, CommunityMirrorAdagentsJson, CommunityMirrorPublishResponse, CommunityMirrorPublishError, CommunityMirrorPublishRequest, CommunityMirrorDeleteResponse, } from './types';
 export { RegistrySync } from './sync';
-export type { RegistrySyncConfig, RegistrySyncState, RegistrySyncEvents, AgentFilter } from './sync';
+export type { RegistrySyncConfig, RegistrySyncState, RegistrySyncTransport, RegistrySyncEvents, AgentFilter, } from './sync';
+export { openFeedStream, parseSseStream, sanitizeStreamText, DEFAULT_MAX_SSE_FRAME_BYTES, FeedStreamError, FeedStreamUnsupportedError, FeedStreamCursorExpiredError, FeedStreamHttpError, FeedStreamParseError, } from './feed-stream';
+export type { FeedStreamQuery, FeedStreamMessage, FeedHeartbeat, FeedStreamErrorData, OpenFeedStreamOptions, } from './feed-stream';
+export type { FeedFreshness } from './types.generated';
 export { InMemoryCursorStore, FileCursorStore } from './cursor-store';
 export type { CursorStore } from './cursor-store';
 export { PropertyRegistry } from './property-registry';
@@ -39,6 +43,7 @@ export declare class RegistryClient {
     private readonly hasCustomMaxBodyBytes;
     private readonly redirect;
     private readonly fetchImpl;
+    private readonly brandHierarchyCache;
     constructor(config?: RegistryClientConfig);
     /**
      * Resolve a single domain to its canonical brand identity.
@@ -56,6 +61,20 @@ export declare class RegistryClient {
     }): Promise<FindCompanyResult>;
     /** Bulk resolve domains to their canonical brand identities (max 100). */
     lookupBrands(domains: string[]): Promise<Record<string, ResolvedBrand | null>>;
+    /**
+     * Resolve a domain to its ordered corporate brand hierarchy.
+     *
+     * The returned `chain` is ordered from the resolved brand itself through each
+     * parent to the house brand. A 404 from the registry returns `null`.
+     */
+    resolveBrandHierarchy(domain: string, options?: ResolveBrandHierarchyOptions): Promise<BrandHierarchyResolution | null>;
+    /**
+     * Resolve up to 100 domains to ordered corporate brand hierarchies.
+     *
+     * Results are keyed by the caller-supplied domain. Unknown domains map to
+     * `null`, matching `lookupBrands()`.
+     */
+    resolveBrandHierarchies(domains: string[], options?: ResolveBrandHierarchyOptions): Promise<Record<string, BrandHierarchyResolution | null>>;
     /** List brands in the registry with optional search and pagination. */
     listBrands(options?: ListBrandsOptions): Promise<{
         brands: BrandRegistryItem[];
@@ -386,6 +405,22 @@ export declare class RegistryClient {
      * Requires authentication.
      */
     getFeed(options?: FeedQuery): Promise<FeedResponse>;
+    /**
+     * Stream the registry change feed over Server-Sent Events
+     * (`GET /api/registry/feed/stream`).
+     *
+     * Yields typed `feed` / `heartbeat` / `error` messages until the stream
+     * closes. The connection is long-lived — no body-size cap or request timeout
+     * applies; pass an `AbortSignal` to close it. Cursor state lives in the `feed`
+     * page payloads: persist `page.cursor` and reconnect with `{ cursor }`.
+     *
+     * Requires authentication. Most consumers should use `RegistrySync` with
+     * `transport: 'auto'`, which layers reconnect, polling fallback, and
+     * cursor-expiry recovery on top of this method.
+     */
+    streamFeed(query?: FeedStreamQuery, init?: {
+        signal?: AbortSignal;
+    }): AsyncGenerator<FeedStreamMessage>;
     /**
      * Search agents by inventory profile. Returns ranked results with match scores.
      * All filters use AND logic across dimensions; multiple CSV values within a
@@ -401,6 +436,14 @@ export declare class RegistryClient {
      * Requires authentication.
      */
     requestCrawl(domain: string): Promise<CrawlRequestResponse>;
+    /**
+     * Request fan-out re-validation for publishers delegating to a manager domain.
+     * Use after rotating a manager's adagents.json so MANAGERDOMAIN publishers
+     * are queued without waiting for the next routine crawl cycle.
+     *
+     * Requires authentication.
+     */
+    requestManagerRevalidation(managerDomain: string): Promise<ManagerRevalidationResponse>;
     /** List policies in the governance policy registry with optional filtering. */
     listPolicies(params?: ListPoliciesQuery): Promise<ListPoliciesResponse>;
     /** Resolve a single policy by ID. Optionally pin to a specific version. */
@@ -423,6 +466,12 @@ export declare class RegistryClient {
     private normalizeBrandLogoList;
     private toBrandLogoBlob;
     private normalizeCommunityMirrorPlatform;
+    private brandHierarchyCacheKey;
+    private normalizeBrandHierarchyDomain;
+    private resolveBrandHierarchyCacheTtlMs;
+    private getCachedBrandHierarchy;
+    private setCachedBrandHierarchy;
+    private cloneBrandHierarchy;
     private resolveCommunityMirrorPublishArgs;
     private communityMirrorPlatformFromConfig;
     private assertCommunityMirrorPropertiesMatchPlatform;