@ggui-ai/registry-core 0.2.0-alpha.4 → 0.4.0-rc.0

package/README.md

@@ -6,7 +6,7 @@ Pure-TypeScript registry operations + storage interfaces for the **ggui marketpl
 
 The registry's business logic — manifest validation, conformance gating, signature verification, version immutability — is identical regardless of where the registry runs. This package extracts that logic so:
 
-- The hosted registry's transport layer is a thin shell over these ops.
+- A hosted registry's transport layer is a thin shell over these ops.
 - The OSS server is a [hono](https://hono.dev) + filesystem/memory adapter over the same ops.
 - A third-party operator can build their own transport (Express, Fastify, gRPC) by implementing two storage interfaces.
 

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export type { AuthnContext } from './interfaces/authn.js';
 export type { BundleStorage } from './interfaces/bundle-storage.js';
 export { AuthorKeyAlreadyExistsError, type PutAuthorKeyOptions, type RegistryStorage, } from './interfaces/registry-storage.js';
 export { ARTIFACTS_METADATA_SK, type ArtifactKind, type ArtifactScanFilter, type ArtifactVersionRow, type ArtifactsMetadataRow, type AuthorKeyRow, type CompiledBlobRow, type ErrorBody, LIST_VERSIONS_ERROR_CODES, type ListVersionsErrorBody, type ListVersionsErrorCode, type ListVersionsResponse, PUBLISH_ERROR_CODES, type PublishErrorBody, type PublishErrorCode, type PublishRequestBody, type PublishResponseBody, READ_ERROR_CODES, type ReadErrorBody, type ReadErrorCode, type ReadPkgResponse, REGISTER_AUTHOR_KEY_ERROR_CODES, type RegisterAuthorKeyErrorBody, type RegisterAuthorKeyErrorCode, type RegisterAuthorKeyRequestBody, type RegisterAuthorKeyResponseBody, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, type SearchErrorBody, type SearchErrorCode, type SearchResponse, type SearchResultEntry, type SearchSort, type VersionListEntry, type Visibility, } from './types.js';
-export { BLUEPRINT_EXTERNAL_MODULES, compileBlueprint, compiledDigestHex, type CompileBlueprintErr, type CompileBlueprintOk, type CompileBlueprintResult, } from './ops/compile.js';
+export { compileBlueprint, type CompileBlueprintErr, type CompileBlueprintOk, type CompileBlueprintResult, } from './ops/compile.js';
 export { checkConformance, MAX_BLUEPRINT_SOURCE_BYTES, type BlueprintProbeRunner, type ConformanceError, type ConformanceErrorCode, type ConformanceFailureCode, type ConformanceRequestPayload, type ConformanceResponseBody, } from './ops/conformance.js';
 export { publishArtifact, MAX_BUNDLE_BYTES, type PublishArtifactDeps, type PublishArtifactInput, type PublishArtifactResult, } from './ops/publish.js';
 export { readArtifact, type ReadArtifactDeps, type ReadArtifactInput, type ReadArtifactResult, } from './ops/read.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -11,7 +11,7 @@ export { AuthorKeyAlreadyExistsError, } from './interfaces/registry-storage.js';
 // Types — rows + wire shapes
 export { ARTIFACTS_METADATA_SK, LIST_VERSIONS_ERROR_CODES, PUBLISH_ERROR_CODES, READ_ERROR_CODES, REGISTER_AUTHOR_KEY_ERROR_CODES, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, } from './types.js';
 // Operations
-export { BLUEPRINT_EXTERNAL_MODULES, compileBlueprint, compiledDigestHex, } from './ops/compile.js';
+export { compileBlueprint, } from './ops/compile.js';
 export { checkConformance, MAX_BLUEPRINT_SOURCE_BYTES, } from './ops/conformance.js';
 export { publishArtifact, MAX_BUNDLE_BYTES, } from './ops/publish.js';
 export { readArtifact, } from './ops/read.js';

package/dist/interfaces/authn.d.ts

@@ -3,9 +3,9 @@
  *
  * Vendor-neutral — registry-core's API never names a specific identity
  * provider (no JWT, no bearer, no cloud-vendor enum). Verification is
- * transport-specific: cloud handlers verify a JWT from the platform's
- * hosted auth surface and produce an `AuthnContext`; the OSS server
- * verifies a bearer token and produces an `AuthnContext`. Once
+ * transport-specific: a hosted deployment's handlers verify a JWT
+ * from its identity provider and produce an `AuthnContext`; the OSS
+ * server verifies a bearer token and produces an `AuthnContext`. Once
  * registry-core has the context, it only knows WHO is calling, not
  * HOW they proved it.
  *
@@ -16,8 +16,9 @@
  *
  * ## Protocol & Contract Bar
  *
- * **Parties:** the registry transport (cloud Lambda or OSS hono
- * server) is the producer; registry-core's ops are the consumer.
+ * **Parties:** the registry transport (a hosted deployment's handler
+ * or the OSS hono server) is the producer; registry-core's ops are
+ * the consumer.
  *
  * **Obligations:** the producer MUST verify the caller's credentials
  * (JWT signature, bearer-token constant-time compare, …) before
@@ -41,7 +42,7 @@
  */
 export interface AuthnContext {
     /**
-     * Stable, opaque caller identity. Cloud transport: hosted-auth `sub`
+     * Stable, opaque caller identity. JWT transport: the token's `sub`
      * claim. OSS bearer: a configured user identifier the operator chose
      * to associate with the token (or a hash of the token itself when no
      * identifier is configured).

package/dist/interfaces/authn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authn.d.ts","sourceRoot":"","sources":["../../src/interfaces/authn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"authn.d.ts","sourceRoot":"","sources":["../../src/interfaces/authn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B"}

package/dist/interfaces/bundle-storage.d.ts

@@ -1,21 +1,21 @@
 /**
- * `BundleStorage` — bundle + signature + manifest blob storage. The
- * hosted registry backs this with S3 behind a CDN; the open-source
- * server backs it with the filesystem under
+ * `BundleStorage` — bundle + signature + manifest blob storage. A
+ * hosted implementation may serve blobs from object storage behind a
+ * CDN; the open-source server backs it with the filesystem under
  * `<root>/bundles/<scope>/<name>/<version>/`. A memory impl is
  * provided for tests.
  *
  * Each `put*` method returns the fully-qualified URL the consumer
  * (iframe runtime, install CLI) can fetch. The URL prefix is
- * determined by the impl's constructor — a CDN alias for the hosted
- * registry, or `http://localhost:9001` (or whatever the server is
- * bound to) for the open-source server.
+ * determined by the impl's constructor — a CDN alias for a
+ * CDN-fronted implementation, or `http://localhost:9001` (or
+ * whatever the server is bound to) for the open-source server.
  *
  * Bundles are immutable post-publish. Responses MUST emit
  * `Cache-Control: public, max-age=31536000, immutable` — SRI integrity
  * depends on it. The OSS server's bundle route sets this header
- * explicitly; the cloud's CloudFront distribution sets it via its
- * cache policy.
+ * explicitly; a CDN-fronted implementation sets it via its cache
+ * policy.
  *
  * ## Protocol & Contract Bar
  *

package/dist/interfaces/registry-storage.d.ts

@@ -1,9 +1,9 @@
 /**
  * `RegistryStorage` — the per-row persistence seam for the marketplace
- * registry. The interface mirrors a three-table DynamoDB shape
- * (artifacts + artifact-versions + author-keys) so a hosted DynamoDB
- * adapter can be a structural pass-through. Memory + filesystem impls
- * back the open-source server and unit tests.
+ * registry. The interface is a three-table key-value shape
+ * (artifacts + artifact-versions + author-keys) chosen so a hosted
+ * database adapter can be a structural pass-through. Memory +
+ * filesystem impls back the open-source server and unit tests.
  *
  * The shape follows a single-interface / multiple-impls / contract-test
  * pattern, with a Protocol & Contract Bar docstring.
@@ -23,19 +23,20 @@
  *
  * **Obligations:**
  * - {@link putArtifactVersionIfAbsent} MUST atomically reject when a row
- *   exists for `(artifactId, version)`. Mirrors DDB's
- *   `ConditionExpression: attribute_not_exists(...)`. Implementations
+ *   exists for `(artifactId, version)` — a conditional put-if-absent
+ *   at the storage layer. Implementations
  *   MUST NOT overwrite on conflict — per-version immutability is a
  *   load-bearing registry invariant.
  * - {@link getArtifactMetadata} / {@link getArtifactVersion} MUST return
  *   exactly what was last written. `null` on miss; throw on transport
  *   failure (caller decides retry).
- * - {@link scanArtifacts} returns rows in arbitrary order (cloud DDB
- *   Scan order; memory insertion order; filesystem directory order).
+ * - {@link scanArtifacts} returns rows in arbitrary order
+ *   (backing-store scan order; memory insertion order; filesystem
+ *   directory order).
  *   Consumers MUST treat ordering as non-deterministic.
  *
  * **Failure mode:**
- * - Transport-level failures (DDB throttle, disk full) throw.
+ * - Transport-level failures (store throttling, disk full) throw.
  *   {@link publishArtifact} wraps and returns 500 with `internal`
  *   error code.
  * - Missing rows return `null`; never throw.
@@ -63,8 +64,8 @@ export interface PutAuthorKeyOptions {
 /**
  * Thrown by {@link RegistryStorage.putAuthorKey} when the caller passed
  * `ifNotExists: true` AND a row already exists for `(subject, keyId)`.
- * Cloud DDB adapter surfaces `ConditionalCheckFailedException` as this
- * type; in-memory impl mirrors the contract synchronously.
+ * A hosted database adapter surfaces its conditional-write conflict
+ * as this type; the in-memory impl mirrors the contract synchronously.
  *
  * Callers re-read via {@link RegistryStorage.getAuthorKey} and dispatch
  * same-publicKey → 200, different-publicKey → 409.
@@ -91,16 +92,16 @@ export interface RegistryStorage {
     getArtifactVersion(artifactId: string, version: string): Promise<ArtifactVersionRow | null>;
     /**
      * List every version row for `artifactId`. Returns in arbitrary order
-     * (DDB Query order by SK = version, lexicographic; memory map
+     * (backing-store query order; memory map
      * insertion order; filesystem directory order). Callers MUST sort
      * by semver themselves if they need ordering.
      *
      * Backs the `GET /pkg/:scope/:name` list-versions route.
      *
-     * **Cost note.** A DynamoDB impl uses `Query` with `PK = artifactId`,
-     * which is the cheapest possible per-artifact lookup (no Scan, no
-     * GSI). Memory + filesystem impls do a full table walk filtered by
-     * artifactId — adequate for bounded row counts.
+     * **Cost note.** A key-value impl can serve this as a single
+     * partition query keyed by artifactId — the cheapest possible
+     * per-artifact lookup. Memory + filesystem impls do a full table
+     * walk filtered by artifactId — adequate for bounded row counts.
      *
      * **Returns:** empty array when no versions exist (NOT null) — the
      * "metadata-row present but no version rows" state should never
@@ -158,8 +159,9 @@ export interface RegistryStorage {
      *   - Version-row conflict — `(artifactId, version)` already exists.
      *     NEITHER row mutates. Returns `{ ok: false, reason: 'version_exists' }`.
      *     The publisher's idempotent-retry path.
-     *   - Transport-level failures (DDB throttle, disk full, transaction
-     *     conflict not attributable to either conditional) throw —
+     *   - Transport-level failures (store throttling, disk full,
+     *     transaction conflict not attributable to either conditional)
+     *     throw —
      *     {@link publishArtifact} wraps and returns 500.
      *
      * **Atomicity guarantee:**
@@ -167,10 +169,11 @@ export interface RegistryStorage {
      *   - Memory + filesystem impls: single-threaded JS event loop —
      *     the function awaits both writes before returning, no other
      *     awaitable interleaves.
-     *   - Cloud DDB impl: `TransactWriteItems` is all-or-nothing at the
-     *     service level. The new-blob path issues one transaction; the
-     *     dedup path may retry once if the optimistic new-blob path
-     *     fails because the digest landed between read-and-write.
+     *   - A hosted database impl uses its store's all-or-nothing
+     *     multi-row transaction. The new-blob path issues one
+     *     transaction; the dedup path may retry once if the optimistic
+     *     new-blob path fails because the digest landed between
+     *     read-and-write.
      *
      * **Why a single transaction matters (refCount double-increment on
      * retry)**: a sequenced write path could increment refCount, then

package/dist/interfaces/registry-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/registry-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAChB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C;AAED,MAAM,WAAW,eAAe;IAE9B,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;QACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,oBAAoB,EAAE,CAAC;QAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAGH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,0BAA0B,CACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxE;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8CG;IACH,oBAAoB,CAClB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAC1C,CAAC;IAGF,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,YAAY,CACV,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;CACnE"}
+{"version":3,"file":"registry-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/registry-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAChB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C;AAED,MAAM,WAAW,eAAe;IAE9B,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;QACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,oBAAoB,EAAE,CAAC;QAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAGH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,0BAA0B,CACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxE;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,oBAAoB,CAClB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAC1C,CAAC;IAGF,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,YAAY,CACV,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;CACnE"}

package/dist/interfaces/registry-storage.js

@@ -1,8 +1,8 @@
 /**
  * Thrown by {@link RegistryStorage.putAuthorKey} when the caller passed
  * `ifNotExists: true` AND a row already exists for `(subject, keyId)`.
- * Cloud DDB adapter surfaces `ConditionalCheckFailedException` as this
- * type; in-memory impl mirrors the contract synchronously.
+ * A hosted database adapter surfaces its conditional-write conflict
+ * as this type; the in-memory impl mirrors the contract synchronously.
  *
  * Callers re-read via {@link RegistryStorage.getAuthorKey} and dispatch
  * same-publicKey → 200, different-publicKey → 409.

package/dist/ops/compile.d.ts

@@ -17,21 +17,6 @@ export interface CompileBlueprintErr {
     }>;
 }
 export type CompileBlueprintResult = CompileBlueprintOk | CompileBlueprintErr;
-/**
- * Always-allowed imports on the SOURCE side. Mirrors the conformance
- * gate's `BLUEPRINT_ALLOWED_IMPORTS` to keep the wire-contract aligned;
- * any addition here MUST land in the conformance gate at the same
- * commit (and vice versa).
- */
-export declare const BLUEPRINT_EXTERNAL_MODULES: readonly string[];
-/**
- * Hex SHA-256 of `compiledBytes` (base64-decoded). Pure function; the
- * deterministic-compile contract is `compile(source) → sha256(bytes)`.
- *
- * Exported for callers that want to recompute the digest without
- * re-compiling (e.g. install-time defense-in-depth).
- */
-export declare function compiledDigestHex(compiledBytes: string): string;
 /**
  * Compile a blueprint's TSX `source` into canonical compiled JS bytes.
  *

package/dist/ops/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/ops/compile.ts"],"names":[],"mappings":"AAsDA,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1E,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAKtD,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,CA6CvE"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/ops/compile.ts"],"names":[],"mappings":"AAoDA,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1E,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,CA4CvE"}

package/dist/ops/compile.js

@@ -20,19 +20,17 @@
  *   target: 'es2022'           — pinned to the lowest engine the
  *                                 protocol supports; rebumping is a
  *                                 minor protocol version bump.
- *   bundle: true               — single-file output; the matcher writes
- *                                 the bytes directly into componentCode.
  *   minify: false              — readability matters more than size at
  *                                 this scale (~10s of KB per blueprint).
- *   external: ['react',        — host-provided modules at iframe-render
- *              'react-dom',      time. The conformance gate enforces
- *              'react/jsx-runtime', the same allow-list on the SOURCE
- *              '@ggui-ai/gadgets']  side so we never compile a blueprint
- *                                   whose imports don't survive bundling.
- *   loader.tsx: 'tsx'          — input is JSX/TSX text.
+ *   loader: 'tsx'              — input is JSX/TSX text.
  *   treeShaking: false         — preserve all imports so the conformance
  *                                gate's import-walk matches what's in
- *                                the compiled output.
+ *                                the compiled output. Imports pass
+ *                                through verbatim (transformSync does
+ *                                no bundle resolution); consumers
+ *                                (iframe runtime, matcher) provide the
+ *                                conformance-gate allow-listed modules
+ *                                at module-load time.
  *
  * **esbuild version pin.** `packages/registry-core/package.json` pins
  * `esbuild` to a single minor — the digest is sensitive to esbuild's
@@ -51,28 +49,6 @@
  */
 import * as esbuild from 'esbuild';
 import { createHash } from 'node:crypto';
-/**
- * Always-allowed imports on the SOURCE side. Mirrors the conformance
- * gate's `BLUEPRINT_ALLOWED_IMPORTS` to keep the wire-contract aligned;
- * any addition here MUST land in the conformance gate at the same
- * commit (and vice versa).
- */
-export const BLUEPRINT_EXTERNAL_MODULES = Object.freeze([
-    'react',
-    'react-dom',
-    'react/jsx-runtime',
-    '@ggui-ai/gadgets',
-]);
-/**
- * Hex SHA-256 of `compiledBytes` (base64-decoded). Pure function; the
- * deterministic-compile contract is `compile(source) → sha256(bytes)`.
- *
- * Exported for callers that want to recompute the digest without
- * re-compiling (e.g. install-time defense-in-depth).
- */
-export function compiledDigestHex(compiledBytes) {
-    return createHash('sha256').update(Buffer.from(compiledBytes, 'base64')).digest('hex');
-}
 /**
  * Compile a blueprint's TSX `source` into canonical compiled JS bytes.
  *
@@ -105,13 +81,12 @@ export function compileBlueprint(source) {
             // path strings into the output, breaking digest stability.
             sourcemap: false,
         });
-        // Note on `BLUEPRINT_EXTERNAL_MODULES`: with `transformSync` (not
-        // `buildSync`) imports are preserved verbatim in the output —
-        // tree-shaking off + no bundle resolution means the import
-        // statements pass through unmodified. The externals list is the
-        // CONTRACT consumers (iframe runtime, matcher) honor at module-
-        // load time. The conformance gate's import-walk enforces the
-        // allow-list on the source side before publish.
+        // With `transformSync` (not `buildSync`) imports are preserved
+        // verbatim in the output — tree-shaking off + no bundle resolution
+        // means the import statements pass through unmodified. Consumers
+        // (iframe runtime, matcher) provide the allow-listed modules at
+        // module-load time; the conformance gate's import-walk enforces
+        // that allow-list on the source side before publish.
         const bytes = Buffer.from(result.code, 'utf-8');
         const compiledBytes = bytes.toString('base64');
         const compiledDigest = createHash('sha256').update(bytes).digest('hex');

package/dist/ops/conformance.d.ts

@@ -1,7 +1,6 @@
 /**
- * Conformance check — a pure function shared by the registry server,
- * the hosted registry, and the publish op so they all enforce the
- * same gate.
+ * Conformance check — a pure function shared by every registry
+ * transport and the publish op so they all enforce the same gate.
  *
  * ## Gadget gates
  *
@@ -117,9 +116,9 @@ export interface ConformanceResponseBody {
  */
 export declare const MAX_BLUEPRINT_SOURCE_BYTES: number;
 /**
- * Run the conformance check synchronously. Pure function: no AWS, no
+ * Run the conformance check synchronously. Pure function: no
  * network, no env lookups. Returns the locked response body shape.
- * The OSS server, the cloud Lambda, and the publish op all call this.
+ * Every registry transport and the publish op call this.
  *
  * Static gates only — the optional runtime probe lives behind a
  * {@link BlueprintProbeRunner} seam so registry-core stays free of

package/dist/ops/conformance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../src/ops/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAGpB;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,wBAAwB,GACxB,4BAA4B,GAC5B,yBAAyB,GACzB,6BAA6B,GAC7B,kCAAkC,GAClC,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAkBD;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,yBAAyB,GACjC,uBAAuB,CAgBzB;AAmbD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,GACzD,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../src/ops/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAGpB;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,wBAAwB,GACxB,4BAA4B,GAC5B,yBAAyB,GACzB,6BAA6B,GAC7B,kCAAkC,GAClC,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAkBD;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,yBAAyB,GACjC,uBAAuB,CAgBzB;AAmbD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,GACzD,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/ops/conformance.js

@@ -1,7 +1,6 @@
 /**
- * Conformance check — a pure function shared by the registry server,
- * the hosted registry, and the publish op so they all enforce the
- * same gate.
+ * Conformance check — a pure function shared by every registry
+ * transport and the publish op so they all enforce the same gate.
  *
  * ## Gadget gates
  *
@@ -92,9 +91,9 @@ const ALWAYS_ALLOWED_IMPORTS = new Set([
  */
 export const MAX_BLUEPRINT_SOURCE_BYTES = 5 * 1024 * 1024;
 /**
- * Run the conformance check synchronously. Pure function: no AWS, no
+ * Run the conformance check synchronously. Pure function: no
  * network, no env lookups. Returns the locked response body shape.
- * The OSS server, the cloud Lambda, and the publish op all call this.
+ * Every registry transport and the publish op call this.
  *
  * Static gates only — the optional runtime probe lives behind a
  * {@link BlueprintProbeRunner} seam so registry-core stays free of

package/dist/ops/list-versions.d.ts

@@ -29,9 +29,9 @@ import type { AuthnContext } from '../interfaces/authn.js';
 import type { RegistryStorage } from '../interfaces/registry-storage.js';
 export interface ListArtifactVersionsInput {
     /**
-     * `<scope>/<name>` — the install identifier. Scope MUST start with `@`.
-     * Cloud API Gateway path params drop the leading `@`; the cloud
-     * Lambda shell re-prepends before calling this op.
+     * `<scope>/<name>` — the install identifier. Scope MUST start
+     * with `@`. Transports whose path params drop the leading `@`
+     * MUST re-prepend it before calling this op.
      */
     readonly artifactId: string;
 }

package/dist/ops/publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/ops/publish.ts"],"names":[],"mappings":"AA2BA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAIV,gBAAgB,EAEhB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAMzE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;CAChD;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC/E;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC,CAAC;AAEN,wBAAsB,eAAe,CACnC,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CA0XhC"}
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../src/ops/publish.ts"],"names":[],"mappings":"AA2BA,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAIV,gBAAgB,EAEhB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAMzE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;CAChD;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC/E;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC,CAAC;AAEN,wBAAsB,eAAe,CACnC,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAuXhC"}

package/dist/ops/publish.js

@@ -22,7 +22,7 @@
  *   10. Return 201 with the wire-locked {@link PublishResponseBody}.
  */
 import { parseArtifactManifest, } from '@ggui-ai/artifact-manifest';
-import { canonicalJson, isGadgetSignature, verifyBundleEd25519, verifyBundleSigstore, } from '@ggui-ai/gadget-signing';
+import { canonicalJson, extractSigstoreLeafCertPem, isGadgetSignature, verifyBundleEd25519, verifyBundleSigstore, } from '@ggui-ai/gadget-signing';
 import { bundleHostScheme } from '@ggui-ai/protocol';
 import { ZodError } from 'zod';
 import { ARTIFACTS_METADATA_SK } from '../types.js';
@@ -155,13 +155,10 @@ export async function publishArtifact(input, deps) {
             return error(400, 'signature_invalid', verifyResult.reason);
         }
         // Persist the leaf cert PEM on the version row so install
-        // consumers can render the signer identity. Extracted inline from
-        // the bundle's `verificationMaterial.x509CertificateChain.certificates[0]`
-        // for now — TODO: replace with `extractSigstoreLeafCertPem(signature)`
-        // from `@ggui-ai/gadget-signing` so the parsing logic lives next to
-        // the bundle-format knowledge (single source of truth for the
-        // cosign-bundle shape).
-        const leafCertPem = extractSigstoreLeafCertPemInline(input.signature);
+        // consumers can render the signer identity. The cosign-bundle
+        // parsing lives in `@ggui-ai/gadget-signing` next to the verify
+        // impl (single source of truth for the bundle shape).
+        const leafCertPem = extractSigstoreLeafCertPem(input.signature);
         if (leafCertPem === undefined) {
             return error(400, 'signature_invalid', 'sigstore verify succeeded but bundle is missing `verificationMaterial.x509CertificateChain.certificates[0].rawBytes` — cannot pin author identity on the version row');
         }
@@ -348,46 +345,6 @@ function error(status, code, message, detail) {
         body: detail === undefined ? { error: code, message } : { error: code, message, detail },
     };
 }
-/**
- * Extract the Fulcio leaf cert's base64 raw bytes from a serialized
- * cosign bundle (per `@sigstore/bundle` v0.3 spec). Returns `undefined`
- * if the bundle is malformed or missing the cert chain.
- *
- * Inline today — TODO: pull this into `@ggui-ai/gadget-signing` as
- * `extractSigstoreLeafCertPem` so the bundle-format knowledge sits
- * next to the verify impl. The install CLI carries an identical
- * helper today; both should collapse to the single canonical export.
- */
-function extractSigstoreLeafCertPemInline(signature) {
-    let parsed;
-    try {
-        parsed = JSON.parse(signature.bundle);
-    }
-    catch {
-        return undefined;
-    }
-    if (parsed === null || typeof parsed !== 'object')
-        return undefined;
-    const verificationMaterial = parsed
-        .verificationMaterial;
-    if (verificationMaterial === null || typeof verificationMaterial !== 'object') {
-        return undefined;
-    }
-    const chain = verificationMaterial
-        .x509CertificateChain;
-    if (chain === null || typeof chain !== 'object')
-        return undefined;
-    const certificates = chain.certificates;
-    if (!Array.isArray(certificates) || certificates.length === 0)
-        return undefined;
-    const leaf = certificates[0];
-    if (leaf === null || typeof leaf !== 'object')
-        return undefined;
-    const rawBytes = leaf.rawBytes;
-    if (typeof rawBytes !== 'string' || rawBytes.length === 0)
-        return undefined;
-    return rawBytes;
-}
 /**
  * Translate a {@link ConformanceResponseBody} error list into a 400
  * `PublishArtifactResult`. Used by both the static-gate failure path

package/dist/ops/read.d.ts

@@ -1,7 +1,7 @@
 /**
  * `readArtifact` — pure op for `GET /pkg/{scope}/{name}/{version}`.
- * A shared op that both this server and the hosted registry project
- * through their respective transport shells.
+ * A shared op that every registry deployment projects through its
+ * own transport shell.
  *
  * Flow:
  *   1. Point-read the version row via {@link RegistryStorage.getArtifactVersion}.
@@ -19,9 +19,9 @@ import type { AuthnContext } from '../interfaces/authn.js';
 import type { RegistryStorage } from '../interfaces/registry-storage.js';
 export interface ReadArtifactInput {
     /**
-     * `<scope>/<name>` — the install identifier. Scope MUST start with `@`.
-     * Cloud API Gateway path params drop the leading `@`; the cloud
-     * Lambda shell re-prepends before calling this op.
+     * `<scope>/<name>` — the install identifier. Scope MUST start
+     * with `@`. Transports whose path params drop the leading `@`
+     * MUST re-prepend it before calling this op.
      */
     readonly artifactId: string;
     readonly version: string;

package/dist/types.d.ts

@@ -1,6 +1,6 @@
 /**
  * Row + wire shapes for the ggui marketplace registry. The same
- * shapes back both this open-source server and the hosted registry,
+ * shapes back this open-source server and any hosted implementation,
  * so they project against one definition.
  *
  * Rows are the storage-layer projection — what {@link RegistryStorage}
@@ -18,12 +18,12 @@ import type { ArtifactManifest } from '@ggui-ai/artifact-manifest';
 import type { GadgetSignature } from '@ggui-ai/gadget-signing';
 import type { ConformanceFailureCode } from './ops/conformance.js';
 /**
- * SK literal for the per-artifactId metadata row on the cloud's
- * Artifacts table. Pinned as a constant so cloud + OSS impls agree
- * on the SK.
+ * SK literal for the per-artifactId metadata row in a sort-keyed
+ * table layout. Pinned as a constant so every impl agrees on the SK.
  *
- * OSS impls (filesystem / memory) MAY ignore this — they have one row
- * per artifactId so no SK is needed. Cloud DDB impls MUST honor it.
+ * Filesystem / memory impls MAY ignore this — they have one row per
+ * artifactId so no SK is needed. Sort-keyed database impls MUST
+ * honor it.
  */
 export declare const ARTIFACTS_METADATA_SK: "metadata#";
 /**
@@ -118,17 +118,18 @@ export interface ArtifactVersionRow {
  * load-bearing: federation-ready, cross-app cache sharing, and
  * sigstore signing all key off `compiledDigest`.
  *
- * **Storage choice — inline base64 vs S3 pointer.** The compiled
+ * **Storage choice — inline base64 vs blob pointer.** The compiled
  * bytes are inlined as a base64-encoded string column. Rationale:
  * blueprints today ship raw TSX inline on `manifest.source` (capped
  * at 5 MiB by `MAX_BLUEPRINT_SOURCE_BYTES`); compiled JS is typically
- * 1.5–3× the TSX size. DynamoDB's 400-KiB item ceiling caps practical
- * inline storage around ~300 KiB compiled (~200 KiB TSX), which
- * accommodates every realistic blueprint observed so far. Larger
- * blueprints (and gadgets, which always exceed this) will need an
- * S3-pointer variant as a future enhancement. Inline storage keeps
- * the two-layer write/read contract simple, without the bucket-
- * lifecycle and IAM-grant overhead of S3.
+ * 1.5–3× the TSX size. Typical KV row-size ceilings (e.g. 400 KiB)
+ * cap practical inline storage around ~300 KiB compiled (~200 KiB
+ * TSX), which accommodates every realistic blueprint observed so
+ * far. Larger blueprints (and gadgets, which always exceed this)
+ * will need a blob-store pointer variant as a future enhancement.
+ * Inline storage keeps the two-layer write/read contract simple,
+ * without the lifecycle and access-grant overhead of a separate
+ * blob store.
  *
  * **GC.** `refCount` is maintained on publish (+1) and yank (no
  * decrement — yanked versions retain their pointer for audit;
@@ -139,8 +140,8 @@ export interface ArtifactVersionRow {
  *
  * **Signatures.** `manifestSig` is the publisher's signature
  * (Ed25519 for private artifacts, sigstore-cosign for public) over
- * the manifest's canonical-JSON projection — read by the hosted
- * install path for defense-in-depth re-verification. Stored as a
+ * the manifest's canonical-JSON projection — read by the install
+ * path for defense-in-depth re-verification. Stored as a
  * JSON-encoded `GadgetSignature` discriminated union. `compiledSig`
  * (a registry-rooted sigstore signature over `compiledBytes`) is
  * reserved for a future enhancement.
@@ -160,7 +161,7 @@ export interface CompiledBlobRow {
     /**
      * Publisher's signature envelope, JSON-encoded `GadgetSignature`
      * discriminated union (Ed25519 for private, sigstore-cosign for
-     * public). Read by the hosted install path for defense-in-depth
+     * public). Read by the install path for defense-in-depth
      * re-verification before persisting an installed blueprint. May be
      * absent on rows published before signature persistence existed;
      * the install path hard-fails such rows with a clear error pointing
@@ -229,9 +230,9 @@ export interface SearchResultEntry {
     readonly publishedAt: string;
 }
 /**
- * `GET /search?…` body. `nextCursor` is opaque (impl-defined: cloud
- * uses base64-encoded DDB LastEvaluatedKey; OSS uses an offset). Clients
- * roundtrip it verbatim on the next call.
+ * `GET /search?…` body. `nextCursor` is opaque (impl-defined: a
+ * paged-database impl encodes its native page cursor; OSS uses an
+ * offset). Clients roundtrip it verbatim on the next call.
  */
 export interface SearchResponse {
     readonly results: readonly SearchResultEntry[];
@@ -243,18 +244,19 @@ export interface SearchResponse {
  *
  *   - `recent` — order by {@link ArtifactsMetadataRow.publishedAt} DESC.
  *
- * Default (sort omitted) is impl-defined ordering: memory uses insertion
- * order, filesystem uses directory order, DDB uses Scan order. Callers
- * MUST opt in to a deterministic order via this field.
+ * Default (sort omitted) is impl-defined ordering: memory uses
+ * insertion order, filesystem uses directory order, a database impl
+ * uses its scan order. Callers MUST opt in to a deterministic order
+ * via this field.
  *
  * **Scale ceiling.** The `recent` sort is implemented as an in-memory
  * pass on the page returned by {@link RegistryStorage.scanArtifacts}.
  * For pre-launch row counts (< ~1k artifacts, single-page scans with
  * `limit=200`) this gives a globally-correct order. Once the artifact
- * table grows past one Scan page (~1 MiB of items), the order is only
+ * table grows past one scan page (~1 MiB of items), the order is only
  * page-local — clients paginating with `cursor` see per-page recency,
- * not global. A DDB GSI on `publishedAt` is the proper fix and is
- * planned as a follow-up.
+ * not global. A secondary index on `publishedAt` is the proper fix
+ * and is planned as a follow-up.
  */
 export declare const SEARCH_SORT_OPTIONS: readonly ["recent"];
 export type SearchSort = (typeof SEARCH_SORT_OPTIONS)[number];
@@ -292,10 +294,10 @@ export interface VersionListEntry {
  *
  * No pagination cursor — registry artifact version counts are
  * inherently bounded (typical: < 50 versions per artifact, hard ceiling
- * around ~1k for the lifetime of an artifact). If a single artifact ever
- * crosses the 1 MiB DDB Query page, we'll add a cursor — but for now the
- * round-trip cost of paginating versions is greater than the cost of
- * returning them all.
+ * around ~1k for the lifetime of an artifact). If a single artifact
+ * ever crosses a backing store's query-page size (~1 MiB), we'll add
+ * a cursor — but for now the round-trip cost of paginating versions
+ * is greater than the cost of returning them all.
  */
 export interface ListVersionsResponse {
     readonly artifactId: string;
@@ -445,8 +447,9 @@ export type ErrorBody = PublishErrorBody | ReadErrorBody | SearchErrorBody | Reg
  * Search filter shape. Passed to {@link RegistryStorage.scanArtifacts}.
  * `limit` is clamped to [1, 200] by {@link searchArtifacts}; impls
  * should respect it as a hard ceiling. `cursor` is opaque to consumers
- * — impls choose their own encoding (DDB LastEvaluatedKey base64;
- * memory uses an integer offset; filesystem uses a last-seen artifactId).
+ * — impls choose their own encoding (a database impl's native page
+ * cursor; memory uses an integer offset; filesystem uses a last-seen
+ * artifactId).
  */
 export interface ArtifactScanFilter {
     readonly q?: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,WAAoB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,mBAAmB,qBAAsB,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,sMAWtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,kFAMnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2DAIrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,8EAKlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GACjB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,qBAAqB,CAAC;AAI1B;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,2DAI5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,WAAoB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,mBAAmB,qBAAsB,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,sMAWtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,kFAMnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2DAIrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,8EAKlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GACjB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,qBAAqB,CAAC;AAI1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,2DAI5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/dist/types.js

@@ -1,10 +1,10 @@
 /**
- * SK literal for the per-artifactId metadata row on the cloud's
- * Artifacts table. Pinned as a constant so cloud + OSS impls agree
- * on the SK.
+ * SK literal for the per-artifactId metadata row in a sort-keyed
+ * table layout. Pinned as a constant so every impl agrees on the SK.
  *
- * OSS impls (filesystem / memory) MAY ignore this — they have one row
- * per artifactId so no SK is needed. Cloud DDB impls MUST honor it.
+ * Filesystem / memory impls MAY ignore this — they have one row per
+ * artifactId so no SK is needed. Sort-keyed database impls MUST
+ * honor it.
  */
 export const ARTIFACTS_METADATA_SK = 'metadata#';
 /**
@@ -13,18 +13,19 @@ export const ARTIFACTS_METADATA_SK = 'metadata#';
  *
  *   - `recent` — order by {@link ArtifactsMetadataRow.publishedAt} DESC.
  *
- * Default (sort omitted) is impl-defined ordering: memory uses insertion
- * order, filesystem uses directory order, DDB uses Scan order. Callers
- * MUST opt in to a deterministic order via this field.
+ * Default (sort omitted) is impl-defined ordering: memory uses
+ * insertion order, filesystem uses directory order, a database impl
+ * uses its scan order. Callers MUST opt in to a deterministic order
+ * via this field.
  *
  * **Scale ceiling.** The `recent` sort is implemented as an in-memory
  * pass on the page returned by {@link RegistryStorage.scanArtifacts}.
  * For pre-launch row counts (< ~1k artifacts, single-page scans with
  * `limit=200`) this gives a globally-correct order. Once the artifact
- * table grows past one Scan page (~1 MiB of items), the order is only
+ * table grows past one scan page (~1 MiB of items), the order is only
  * page-local — clients paginating with `cursor` see per-page recency,
- * not global. A DDB GSI on `publishedAt` is the proper fix and is
- * planned as a follow-up.
+ * not global. A secondary index on `publishedAt` is the proper fix
+ * and is planned as a follow-up.
  */
 export const SEARCH_SORT_OPTIONS = ['recent'];
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/registry-core",
-  "version": "0.2.0-alpha.4",
+  "version": "0.4.0-rc.0",
   "description": "Pure-TypeScript registry operations and storage interfaces for the ggui marketplace. No I/O, no HTTP — operations take typed inputs plus a storage deps bag and return discriminated-union results.",
   "keywords": [
     "ggui",
@@ -44,9 +44,9 @@
     "esbuild": "0.25.12",
     "oxc-parser": "^0.131.0",
     "zod": "^4.3.6",
-    "@ggui-ai/artifact-manifest": "0.2.0-alpha.4",
-    "@ggui-ai/gadget-signing": "0.2.0-alpha.4",
-    "@ggui-ai/protocol": "0.2.0-alpha.4"
+    "@ggui-ai/artifact-manifest": "0.4.0-rc.0",
+    "@ggui-ai/gadget-signing": "0.4.0-rc.0",
+    "@ggui-ai/protocol": "0.4.0-rc.0"
   },
   "peerDependenciesMeta": {
     "vitest": {
@@ -56,7 +56,7 @@
   "devDependencies": {
     "@types/node": "^24.0.0",
     "typescript": "^5.0.0",
-    "vitest": "^3.0.0"
+    "vitest": "^3.2.6"
   },
   "repository": {
     "type": "git",