@agent-network-protocol/dsh-anp 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,99 @@
-# Temporary Holding Version
+# DSH ANP
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Apache-2.0 TypeScript plugin for DeepSeek Harness. Discover the agents published
+by a domain, read their descriptions and linked information with a locally
+authorized DID, then invoke operations described by JSON OpenAPI 3.x documents.
+
+## Install and build
+
+Use Node.js 22.13 or later. The plugin targets Cordis 4.1 and the Harness tools
+registry. The public npm package declares a DSH bundle, disabled until configured.
+
+```sh
+npm ci
+npm run build
+npm test
+```
+
+Install the published bundle into a Harness profile:
+
+```sh
+pnpm dsh plugin --profile <profile> add @agent-network-protocol/dsh-anp
+```
+
+Then configure the identity consumer and the bundle row described below before
+setting `enabled: true`. Installing alone does not create an identity, grant
+access, or send signed requests.
+
+To install from source into a Harness runtime, add the Git package to that
+runtime's dependencies and pin a full commit:
+
+```sh
+npm install '@agent-network-protocol/dsh-anp@git+https://github.com/agent-network-protocol/dsh-anp.git#<full-commit>'
+```
+
+The prepare hook builds the exported plugin files during Git installation.
+
+## Host configuration
+
+Install `@agent-network-protocol/dsh-anp/plugin` in the same Host as the shared
+`anpIdentity` service and `tools` registry. Configure this exact consumer in the
+identity service's `allowConsumers` and `userConsumers`, and set its `httpAllowedOrigins` to the
+origins the user approved. Use an existing published local identity reference:
+
+```yaml
+- id: anp
+  name: '@agent-network-protocol/dsh-anp/plugin'
+  config:
+    enabled: true
+    allowedOrigins: ['https://agent-network-protocol.com']
+    identityRef:
+      storeId: '<existing store ID>'
+      identityId: '<existing identity ID>'
+      did: '<existing did:wba identity>'
+```
+
+The first signed operation requests access through the existing identity manager.
+Shared protocol identities that hold only a device authentication key use the
+identity Host's `ordinary-http/1` approval: public reads and exact HTTP request
+authentication only, never raw device assertions or OAuth assertions. A missing
+compatible identity provider is reported as `identity_provider_incompatible`,
+without leaking native errors or credential material.
+Approve it there and retry the operation. A permanent grant is reused; a one-time
+grant is consumed by that operation. A previously approved grant for this exact
+installed consumer may also be supplied as `grantId`. Revocation remains enforced
+by the identity service on every dispatch. Loading with `enabled: false` registers
+no tools and performs no discovery or signing. No private key or signature header
+is supplied by the model.
+
+## Tools
+
+1. `anp_discover({domain})` reads `/.well-known/agent-descriptions` and all `next`
+   pages. The deduplicated count covers the public directory only.
+2. `anp_describe({agentRef})` signs the description request and returns information
+   and interface references from `Infomations` and `interfaces`.
+3. `anp_read({resourceRef})` signs a linked resource request. JSON OpenAPI 3.x
+   interfaces produce callable operation references.
+4. `anp_call({operationRef, path?, query?, body?})` constructs and signs the
+   described operation. Parameters must be declared path/query primitives; bodies
+   use JSON. Other interface protocols remain visible but are not executed.
+
+To allow arbitrary HTTPS domains, explicitly set `allowedOrigins: ['*']` on
+this plugin and set `httpAllowedOrigins['@agent-network-protocol/dsh-anp/plugin']`
+to `['*']` on the identity service. The consumer must remain in `userConsumers`.
+This removes the destination allowlist, not identity approval: the manager shows
+all HTTPS domains as the permission scope. Permanent approval covers that scope;
+one-time approval remains bound to the exact operation. Existing exact-origin
+grants do not expand automatically, and revocation is checked before dispatch.
+HTTP, URL credentials, fragments and redirects remain rejected.
+
+Without the explicit wildcard, only configured HTTPS origins are accessible. References live in the current
+plugin instance; after a reload, discover the domain again. Redirects, pagination
+cycles and incomplete discovery fail explicitly. POST requests are not retried.
+
+## Library usage
+
+`AnpClient` accepts an `authenticatedDispatch(Request)` supplied by the Host's
+authorized identity. `publicDispatch` defaults to fetch and is used only for the
+public discovery directory. Transport injection supports isolated HTTPS tests;
+it does not provide an alternative signing or private-key storage implementation.

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Configure an existing identity and approved HTTPS origins before enabling.
+- insert:
+    - id: anp
+      name: '@agent-network-protocol/dsh-anp/plugin'
+      config:
+        enabled: false

package/lib/index.d.ts

@@ -0,0 +1,64 @@
+type Json = Record<string, unknown>;
+export type Dispatch = (request: Request) => Promise<Response>;
+export interface AnpClientOptions {
+    /** Exact HTTPS origins, or an explicit '*' to allow any HTTPS origin. */
+    allowedOrigins: string[];
+    authenticatedDispatch: Dispatch;
+    publicDispatch?: Dispatch;
+}
+export declare class AnpError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+/** Public references contain no signing capabilities. The Host owns the dispatcher. */
+export declare class AnpClient {
+    private readonly options;
+    private readonly origins;
+    private readonly resources;
+    private readonly operations;
+    constructor(options: AnpClientOptions);
+    private target;
+    private add;
+    private request;
+    discover(domain: string): Promise<{
+        count: number;
+        complete: boolean;
+        agents: {
+            agentRef: string;
+            name: string;
+            url: string;
+        }[];
+    }>;
+    describe(agentRef: string): Promise<{
+        links: {
+            resourceRef: string;
+            kind: string;
+            description?: unknown;
+            protocol?: string;
+        }[];
+        url: string;
+        contentType: string;
+        content: unknown;
+    }>;
+    read(resourceRef: string): Promise<{
+        operations: {
+            operationRef: string;
+            operationId: string;
+            method: string;
+            url: string;
+        }[];
+        url: string;
+        contentType: string;
+        content: unknown;
+    }>;
+    call(operationRef: string, args?: {
+        path?: Json;
+        query?: Json;
+        body?: unknown;
+    }): Promise<{
+        url: string;
+        contentType: string;
+        content: unknown;
+    }>;
+}
+export {};

package/lib/index.js

@@ -0,0 +1,243 @@
+import { randomUUID } from "node:crypto";
+export class AnpError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+    }
+}
+const requireValue = (condition, code = "invalid_document") => {
+    if (!condition)
+        throw new AnpError(code);
+};
+const object = (value) => {
+    requireValue(value !== null && typeof value === "object" && !Array.isArray(value));
+    return value;
+};
+/** Public references contain no signing capabilities. The Host owns the dispatcher. */
+export class AnpClient {
+    options;
+    origins;
+    resources = new Map();
+    operations = new Map();
+    constructor(options) {
+        this.options = options;
+        this.origins = new Set(options.allowedOrigins.map((value) => {
+            if (value === "*")
+                return value;
+            const url = new URL(value);
+            requireValue(url.protocol === "https:" && url.origin === value, "invalid_origin");
+            return url.origin;
+        }));
+    }
+    target(value, base) {
+        const url = new URL(value, base);
+        requireValue(url.protocol === "https:" &&
+            !url.username &&
+            !url.password &&
+            !url.hash &&
+            (this.origins.has("*") || this.origins.has(url.origin)), "origin_not_approved");
+        return url.href;
+    }
+    add(resource) {
+        const entry = [...this.resources].find(([, value]) => value.url === resource.url && value.kind === resource.kind);
+        if (entry)
+            return entry[0];
+        const ref = randomUUID();
+        this.resources.set(ref, resource);
+        return ref;
+    }
+    async request(url, init = {}, signed = true) {
+        const request = new Request(this.target(url), {
+            ...init,
+            redirect: "manual",
+            signal: AbortSignal.timeout(10000),
+            credentials: "omit",
+        });
+        const response = await (signed
+            ? this.options.authenticatedDispatch
+            : (this.options.publicDispatch ?? fetch))(request);
+        requireValue(response.ok && !response.redirected, "http_request_failed");
+        const reader = response.body?.getReader();
+        const chunks = [];
+        let size = 0;
+        if (reader) {
+            try {
+                while (true) {
+                    const part = await reader.read();
+                    if (part.done)
+                        break;
+                    size += part.value.length;
+                    if (size > 4 * 1024 * 1024) {
+                        await reader.cancel();
+                        throw new AnpError("response_too_large");
+                    }
+                    chunks.push(part.value);
+                }
+            }
+            finally {
+                reader.releaseLock();
+            }
+        }
+        const contentType = response.headers.get("content-type") ?? "text/plain";
+        const text = Buffer.concat(chunks).toString("utf8");
+        return {
+            url,
+            contentType,
+            content: /json/i.test(contentType) ? JSON.parse(text) : text,
+        };
+    }
+    async discover(domain) {
+        requireValue(typeof domain === "string" && !!domain && !/[/?#@\\]/.test(domain), "invalid_domain");
+        let url = this.target(`https://${domain}/.well-known/agent-descriptions`);
+        const visited = new Set();
+        const agents = new Map();
+        while (url) {
+            requireValue(!visited.has(url) && visited.size < 64, "invalid_pagination");
+            visited.add(url);
+            const page = object((await this.request(url, {}, false)).content);
+            requireValue(page["@type"] === "CollectionPage" && Array.isArray(page.items));
+            for (const value of page.items) {
+                const item = object(value);
+                requireValue(typeof item["@id"] === "string" && typeof item.name === "string");
+                const target = this.target(item["@id"], url);
+                agents.set(target, {
+                    agentRef: this.add({ url: target, kind: "agent" }),
+                    name: item.name,
+                    url: target,
+                });
+            }
+            requireValue(page.next === undefined || typeof page.next === "string");
+            url =
+                page.next === undefined
+                    ? undefined
+                    : this.target(page.next, url);
+        }
+        return { count: agents.size, complete: true, agents: [...agents.values()] };
+    }
+    async describe(agentRef) {
+        const resource = this.resources.get(agentRef);
+        requireValue(resource?.kind === "agent", "unknown_agent");
+        const result = await this.request(resource.url);
+        const document = object(result.content);
+        requireValue(document.protocolType === "ANP" && document.type === "AgentDescription");
+        const links = [];
+        for (const [field, kind] of [
+            ["Infomations", "information"],
+            ["interfaces", "interface"],
+        ]) {
+            requireValue(document[field] === undefined || Array.isArray(document[field]));
+            for (const value of document[field] ?? []) {
+                const link = object(value);
+                if (typeof link.url !== "string")
+                    continue;
+                const target = this.target(link.url, resource.url);
+                const protocol = typeof link.protocol === "string" ? link.protocol : undefined;
+                links.push({
+                    resourceRef: this.add({ url: target, kind, protocol }),
+                    kind,
+                    ...(link.description === undefined ? {} : { description: link.description }),
+                    ...(protocol === undefined ? {} : { protocol }),
+                });
+            }
+        }
+        return { ...result, links };
+    }
+    async read(resourceRef) {
+        const resource = this.resources.get(resourceRef);
+        requireValue(resource && resource.kind !== "agent", "unknown_resource");
+        const result = await this.request(resource.url);
+        const operations = [];
+        if (resource.kind === "interface" &&
+            /openapi/i.test(resource.protocol ?? "")) {
+            const spec = object(result.content);
+            requireValue(typeof spec.openapi === "string" && spec.openapi.startsWith("3."));
+            const servers = spec.servers === undefined
+                ? [{ url: new URL(resource.url).origin }]
+                : spec.servers;
+            requireValue(Array.isArray(servers) && servers.length > 0);
+            const base = this.target(String(object(servers[0]).url), resource.url).replace(/\/$/, "");
+            for (const [path, value] of Object.entries(object(spec.paths))) {
+                requireValue(path.startsWith("/") &&
+                    !path.startsWith("//") &&
+                    !/[?#\\]/.test(path));
+                const item = object(value);
+                requireValue(item.servers === undefined && item.$ref === undefined, "unsupported_openapi");
+                for (const method of [
+                    "get",
+                    "post",
+                    "put",
+                    "patch",
+                    "delete",
+                    "head",
+                    "options",
+                ]) {
+                    if (item[method] === undefined)
+                        continue;
+                    const operation = object(item[method]);
+                    requireValue(operation.servers === undefined && operation.$ref === undefined, "unsupported_openapi");
+                    const parameters = [
+                        ...(item.parameters ?? []),
+                        ...(operation.parameters ?? []),
+                    ].map(object);
+                    requireValue(parameters.every((p) => p.$ref === undefined &&
+                        ["path", "query"].includes(String(p.in))), "unsupported_openapi");
+                    const operationRef = randomUUID();
+                    const target = this.target(base + path);
+                    this.operations.set(operationRef, {
+                        url: target,
+                        method: method.toUpperCase(),
+                        parameters,
+                        hasBody: operation.requestBody !== undefined,
+                    });
+                    operations.push({
+                        operationRef,
+                        operationId: String(operation.operationId ?? `${method} ${path}`),
+                        method: method.toUpperCase(),
+                        url: target,
+                    });
+                }
+            }
+        }
+        return { ...result, operations };
+    }
+    async call(operationRef, args = {}) {
+        const operation = this.operations.get(operationRef);
+        requireValue(operation, "unknown_operation");
+        let target = operation.url;
+        for (const [location, supplied] of [
+            ["path", args.path ?? {}],
+            ["query", args.query ?? {}],
+        ]) {
+            for (const key of Object.keys(supplied))
+                requireValue(operation.parameters.some((p) => p.in === location && p.name === key), "unknown_parameter");
+            for (const parameter of operation.parameters.filter((p) => p.in === location)) {
+                const value = supplied[String(parameter.name)];
+                requireValue(value !== undefined || parameter.required !== true, "missing_parameter");
+                if (value === undefined)
+                    continue;
+                requireValue(["string", "number", "boolean"].includes(typeof value), "invalid_parameter");
+                if (location === "path") {
+                    requireValue(value !== "." && value !== "..", "invalid_parameter");
+                    target = target
+                        .replace(`{${parameter.name}}`, encodeURIComponent(String(value)))
+                        .replace(`%7B${parameter.name}%7D`, encodeURIComponent(String(value)));
+                }
+            }
+        }
+        requireValue(!/[{}]/.test(decodeURI(target)), "missing_parameter");
+        const url = new URL(target);
+        for (const [key, value] of Object.entries(args.query ?? {}))
+            url.searchParams.set(key, String(value));
+        requireValue(args.body === undefined || operation.hasBody, "unexpected_body");
+        return this.request(url.href, {
+            method: operation.method,
+            ...(args.body === undefined
+                ? {}
+                : {
+                    headers: { "content-type": "application/json" },
+                    body: JSON.stringify(args.body),
+                }),
+        });
+    }
+}

package/lib/plugin.d.ts

@@ -0,0 +1,14 @@
+import type { Context } from "@deepseek-ai/cordis";
+export declare const name = "@agent-network-protocol/dsh-anp/plugin";
+export declare const inject: string[];
+export interface Config {
+    enabled?: boolean;
+    allowedOrigins: string[];
+    identityRef: {
+        storeId: string;
+        identityId: string;
+        did: string;
+    };
+    grantId?: string;
+}
+export declare function apply(ctx: Context, config: Config): void;

package/lib/plugin.js

@@ -0,0 +1,104 @@
+import { randomUUID } from "node:crypto";
+import { AnpClient, AnpError } from "./index.js";
+export const name = "@agent-network-protocol/dsh-anp/plugin";
+export const inject = ["anpIdentity", "tools"];
+const identityFailures = {
+    provider_incompatible: "identity_provider_incompatible",
+    consumer_forbidden: "identity_consumer_forbidden",
+    operation_not_permitted: "identity_operation_not_permitted",
+    grant_inactive: "identity_authorization_unavailable",
+    grant_conflict: "identity_authorization_unavailable",
+};
+function failureCode(error) {
+    if (error instanceof AnpError)
+        return error.code;
+    if (error && typeof error === "object" && "code" in error && typeof error.code === "string") {
+        return Object.hasOwn(identityFailures, error.code) ? identityFailures[error.code] : "anp_request_failed";
+    }
+    return "anp_request_failed";
+}
+export function apply(ctx, config) {
+    if (!config.enabled)
+        return;
+    const identity = ctx.get("anpIdentity").bindUserConsumer(ctx);
+    let grantId = config.grantId;
+    const pending = new Map();
+    const client = new AnpClient({
+        allowedOrigins: config.allowedOrigins,
+        authenticatedDispatch: async (request) => {
+            if (!grantId) {
+                const key = `${request.method} ${request.url} ${await request.clone().text()}`;
+                const old = pending.get(key);
+                const access = old
+                    ? await identity.getAccessRequest(old)
+                    : await identity.requestAccess({
+                        requestId: `anp-${randomUUID()}`,
+                        identity: config.identityRef,
+                        purpose: `ANP ${request.method} ${new URL(request.url).origin}`,
+                        operation: { action: "http", request },
+                    });
+                if (access.status !== "approved" || !access.grantId) {
+                    if (access.status === "pending")
+                        pending.set(key, access.id);
+                    else
+                        pending.delete(key);
+                    throw new AnpError("identity_authorization_required");
+                }
+                pending.delete(key);
+                if (access.mode === "permanent")
+                    grantId = access.grantId;
+                const authorized = await identity.openAuthorizedIdentity(access.grantId);
+                return authorized.authenticatedHttp.dispatch(request);
+            }
+            return (await identity.openAuthorizedIdentity(grantId)).authenticatedHttp.dispatch(request);
+        },
+    });
+    let stopped = false;
+    ctx.effect(() => () => {
+        stopped = true;
+        pending.clear();
+    });
+    const tools = ctx.get("tools");
+    const register = (toolName, properties, required, run) => tools.register({
+        name: toolName,
+        description: `ANP ${toolName.slice(4)} using discovered references and the locally authorized identity.`,
+        parameters: {
+            type: "object",
+            properties,
+            required,
+            additionalProperties: false,
+        },
+        output: {
+            schema: { type: "object", additionalProperties: true },
+            render: (_args, value) => [
+                { type: "text", text: JSON.stringify(value) },
+            ],
+        },
+        execute: async (args, execution) => {
+            if (stopped || !execution.agent || execution.signal?.aborted)
+                return { ok: false, error: "unavailable" };
+            try {
+                const value = await run(args);
+                return stopped
+                    ? { ok: false, error: "unavailable" }
+                    : { ok: true, value };
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    error: failureCode(error),
+                };
+            }
+        },
+    });
+    const string = { type: "string" };
+    register("anp_discover", { domain: string }, ["domain"], (args) => client.discover(String(args.domain)));
+    register("anp_describe", { agentRef: string }, ["agentRef"], (args) => client.describe(String(args.agentRef)));
+    register("anp_read", { resourceRef: string }, ["resourceRef"], (args) => client.read(String(args.resourceRef)));
+    register("anp_call", {
+        operationRef: string,
+        path: { type: "object" },
+        query: { type: "object" },
+        body: {},
+    }, ["operationRef"], (args) => client.call(String(args.operationRef), args));
+}

package/package.json

@@ -1,6 +1,56 @@
 {
   "name": "@agent-network-protocol/dsh-anp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "type": "module",
+  "description": "ANP discovery and authenticated interaction for DeepSeek Harness",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agent-network-protocol/dsh-anp.git"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": "./lib/index.js",
+    "./plugin": "./lib/plugin.js",
+    "./cordis.patch.yml": "./cordis.patch.yml"
+  },
+  "files": [
+    "lib",
+    "README.md",
+    "LICENSE",
+    "cordis.patch.yml"
+  ],
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "npm run build && tsx --test tests/*.test.ts",
+    "prepare": "npm run build",
+    "prepack": "npm run build"
+  },
+  "dependencies": {
+    "@deepseek-ai/cordis": "4.1.0"
+  },
+  "devDependencies": {
+    "typescript": "6.0.3",
+    "tsx": "4.20.6",
+    "@types/node": "24.3.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "keywords": [
+    "anp",
+    "deepseek-harness",
+    "dsh-plugin"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}