@agentxm/registry-protocol 0.31.1 → 0.33.0

package/resolution-metadata.vectors.json

@@ -0,0 +1,177 @@
+{
+  "format": "agentxm-resolution-metadata-vectors-v1",
+  "selectionPolicyVersion": "1",
+  "evaluatedAt": "2026-09-22T12:00:00Z",
+  "cases": [
+    {
+      "name": "ordinary-range-excludes-yanked-release",
+      "source": "direct",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_acme",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          {
+            "version": "1.1.0",
+            "published": "2026-09-18T12:00:00Z",
+            "integrity": "sha512-yanked",
+            "yankedAt": "2026-09-19T12:00:00Z"
+          },
+          { "version": "1.0.0", "published": "2026-09-15T12:00:00Z", "integrity": "sha512-stable" }
+        ]
+      },
+      "request": { "purpose": "select", "range": "^1.0.0", "minimumReleaseAgeSeconds": 0 },
+      "expected": { "kind": "selected", "version": "1.0.0" }
+    },
+    {
+      "name": "exact-pin-retains-yank-warning",
+      "source": "direct",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_acme",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          {
+            "version": "1.1.0",
+            "published": "2026-09-18T12:00:00Z",
+            "integrity": "sha512-yanked",
+            "yankedAt": "2026-09-19T12:00:00Z",
+            "yankedCategory": "superseded"
+          },
+          { "version": "1.0.0", "published": "2026-09-15T12:00:00Z", "integrity": "sha512-stable" }
+        ]
+      },
+      "request": {
+        "purpose": "restore-exact",
+        "range": "1.1.0",
+        "acceptedIntegrity": "sha512-yanked",
+        "minimumReleaseAgeSeconds": 0
+      },
+      "expected": { "kind": "selected", "version": "1.1.0", "warning": "yanked" }
+    },
+    {
+      "name": "minimum-release-age-holds-newer-release",
+      "source": "direct",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_acme",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          { "version": "2.0.0", "published": "2026-09-22T00:00:00Z", "integrity": "sha512-new" },
+          { "version": "1.0.0", "published": "2026-09-15T12:00:00Z", "integrity": "sha512-stable" }
+        ]
+      },
+      "request": { "purpose": "select", "range": "*", "minimumReleaseAgeSeconds": 86400 },
+      "expected": { "kind": "selected", "version": "1.0.0", "newerHeld": "2.0.0" }
+    },
+    {
+      "name": "direct-constraint-selects-highest-satisfying-release",
+      "source": "direct",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_acme",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          { "version": "2.0.0", "published": "2026-09-15T12:00:00Z", "integrity": "sha512-two" },
+          { "version": "1.2.0", "published": "2026-09-14T12:00:00Z", "integrity": "sha512-one-two" }
+        ]
+      },
+      "request": { "purpose": "select", "range": "^1.0.0", "minimumReleaseAgeSeconds": 0 },
+      "expected": { "kind": "selected", "version": "1.2.0" }
+    },
+    {
+      "name": "pack-member-constraint-keeps-member-range",
+      "source": "pack-member",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_acme",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          {
+            "version": "1.1.0",
+            "published": "2026-09-15T12:00:00Z",
+            "integrity": "sha512-one-one"
+          },
+          {
+            "version": "1.0.5",
+            "published": "2026-09-14T12:00:00Z",
+            "integrity": "sha512-one-zero-five"
+          }
+        ]
+      },
+      "request": { "purpose": "select", "range": "~1.0.0", "minimumReleaseAgeSeconds": 0 },
+      "expected": { "kind": "selected", "version": "1.0.5" }
+    },
+    {
+      "name": "package-compatibility-remains-version-scoped",
+      "source": "direct",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_acme",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          {
+            "version": "1.1.0",
+            "published": "2026-09-15T12:00:00Z",
+            "integrity": "sha512-one-one",
+            "packages": [{ "purl": "pkg:npm/%40acme/core", "versionRange": "vers:npm/>=2.0.0" }]
+          },
+          {
+            "version": "1.0.0",
+            "published": "2026-09-14T12:00:00Z",
+            "integrity": "sha512-one-zero",
+            "packages": [{ "purl": "pkg:npm/%40acme/core", "versionRange": "vers:npm/<2.0.0" }]
+          }
+        ]
+      },
+      "request": {
+        "purpose": "select",
+        "range": "^1.0.0",
+        "minimumReleaseAgeSeconds": 0,
+        "compatiblePackage": { "purl": "pkg:npm/%40acme/core", "version": "2.1.0" }
+      },
+      "expected": { "kind": "selected", "version": "1.1.0" }
+    },
+    {
+      "name": "publisher-binding-change-refuses-accepted-identity",
+      "source": "direct",
+      "index": {
+        "owner": "@acme",
+        "type": "skill",
+        "name": "review",
+        "publisherBindingId": "hbnd_current",
+        "archival": null,
+        "deprecation": null,
+        "versions": [
+          { "version": "1.0.0", "published": "2026-09-15T12:00:00Z", "integrity": "sha512-stable" }
+        ]
+      },
+      "request": {
+        "purpose": "restore-exact",
+        "range": "1.0.0",
+        "acceptedIntegrity": "sha512-stable",
+        "expectedPublisherBinding": "hbnd_previous",
+        "minimumReleaseAgeSeconds": 0
+      },
+      "expected": { "kind": "binding-conflict" }
+    }
+  ]
+}

package/dist/src/unstable/publish-authorization.d.ts

@@ -1,26 +0,0 @@
-import * as Schema from "effect/Schema";
-/** Delivery proof is specific to the initiating transport, independently of browser consent. */
-export declare const PublishAuthorizationDeliverySchema: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"loopback">;
-    readonly redirect_uri: Schema.NonEmptyString;
-    readonly state: Schema.NonEmptyString;
-    readonly code_challenge: Schema.String;
-    readonly code_challenge_method: Schema.Literal<"S256">;
-}>, Schema.Struct<{
-    readonly kind: Schema.Literal<"polling">;
-    readonly proof_challenge: Schema.String;
-    readonly proof_challenge_method: Schema.Literal<"S256">;
-}>]>;
-export type PublishAuthorizationDelivery = typeof PublishAuthorizationDeliverySchema.Type;
-export declare const PublishAuthorizationPollingProofSchema: Schema.Struct<{
-    readonly initiator_proof: Schema.String;
-}>;
-export declare const PublishAuthorizationPollingStatusSchema: Schema.Struct<{
-    readonly purpose: Schema.Literal<"publish">;
-    readonly status: Schema.Literals<readonly ["pending", "approved", "denied", "expired", "exchanged"]>;
-    readonly expires_at: Schema.decodeTo<Schema.DateTimeUtc, Schema.String, never, never>;
-    readonly interval: Schema.Int;
-    readonly publication_set_digest: Schema.String;
-}>;
-export type PublishAuthorizationPollingStatus = typeof PublishAuthorizationPollingStatusSchema.Type;
-//# sourceMappingURL=publish-authorization.d.ts.map

package/dist/src/unstable/publish-authorization.js

@@ -1,41 +0,0 @@
-import * as Schema from "effect/Schema";
-import { DateTimeUtcSchema } from "@agentxm/extension-model/unstable/date-time";
-import { Sha256HexSchema } from "./registry/publication-set.js";
-const S256ChallengeSchema = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{43}$/));
-/** Delivery proof is specific to the initiating transport, independently of browser consent. */
-export const PublishAuthorizationDeliverySchema = Schema.Union([
-    Schema.Struct({
-        kind: Schema.Literal("loopback"),
-        redirect_uri: Schema.NonEmptyString,
-        state: Schema.NonEmptyString,
-        code_challenge: S256ChallengeSchema,
-        code_challenge_method: Schema.Literal("S256"),
-    }),
-    Schema.Struct({
-        kind: Schema.Literal("polling"),
-        proof_challenge: S256ChallengeSchema,
-        proof_challenge_method: Schema.Literal("S256"),
-    }),
-]).annotate({
-    identifier: "PublishAuthorizationDelivery",
-    title: "Publish authorization delivery",
-    description: "Loopback code delivery or resumable polling protected by a distinct initiator proof.",
-});
-export const PublishAuthorizationPollingProofSchema = Schema.Struct({
-    initiator_proof: Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{43,128}$/)),
-}).annotate({
-    identifier: "PublishAuthorizationPollingProof",
-    description: "Secret proof held by the initiator; never a public request reference or browser code.",
-});
-export const PublishAuthorizationPollingStatusSchema = Schema.Struct({
-    purpose: Schema.Literal("publish"),
-    status: Schema.Literals(["pending", "approved", "denied", "expired", "exchanged"]),
-    expires_at: DateTimeUtcSchema,
-    interval: Schema.Int.check(Schema.isGreaterThan(0)),
-    publication_set_digest: Sha256HexSchema,
-}).annotate({
-    identifier: "PublishAuthorizationPollingStatus",
-    title: "Publish authorization status",
-    description: "Proof-protected authorization status and material binding; approval is not publication completion.",
-});
-//# sourceMappingURL=publish-authorization.js.map