@ggui-ai/registry-core 0.6.3 → 0.8.0

package/dist/types.d.ts

@@ -14,7 +14,7 @@
  * 'blueprint'` as the discriminator. The field name `artifactId`
  * matches what the field actually contains.
  */
-import type { ArtifactManifest } from '@ggui-ai/artifact-manifest';
+import type { ArtifactManifest, McpToolBinding, McpToolBindingSource } from '@ggui-ai/artifact-manifest';
 import type { GadgetSignature } from '@ggui-ai/gadget-signing';
 import type { ConformanceFailureCode } from './ops/conformance.js';
 /**
@@ -54,6 +54,15 @@ export interface ArtifactsMetadataRow {
     readonly tags?: readonly string[];
     readonly visibility: Visibility;
     readonly hook?: string;
+    /**
+     * Denormalized MCP tool bindings of the latest version — stamped at
+     * publish from the manifest's declared `mcpTools`, or derived from a
+     * blueprint contract's tool names, so registry search can filter by
+     * tool without reading version rows.
+     */
+    readonly mcpTools?: ReadonlyArray<McpToolBinding>;
+    /** How the denormalized bindings were produced: declared on the manifest, or derived from the contract. */
+    readonly mcpToolsSource?: McpToolBindingSource;
     readonly authorName?: string;
     readonly publishedAt: string;
     readonly publishedBy: string;
@@ -183,12 +192,111 @@ export interface CompiledBlobRow {
  * Author signing-key row. One per `(subject, keyId)` pair. The key is
  * stored base64 — verification re-decodes + invokes
  * {@link verifyBundleEd25519}.
+ *
+ * `createdAt` + `label` ([E], 2026-08-10) are display enrichment for
+ * key-management surfaces (the list endpoint and whatever UI a
+ * deployment builds on it). Both are
+ * optional: rows written before the enrichment carry neither, and
+ * consumers MUST render the absence honestly (an em dash, not a
+ * fabricated date). `createdAt` is stamped by {@link registerAuthorKey}
+ * on first write; `label` is caller-supplied free text.
  */
 export interface AuthorKeyRow {
     readonly subject: string;
     readonly keyId: string;
     readonly publicKeyBase64: string;
+    /** ISO timestamp stamped by the register op on first write. */
+    readonly createdAt?: string;
+    /** Optional human-readable name (`ggui keys register --label …`). */
+    readonly label?: string;
 }
+/**
+ * Verification state of a claimed scope.
+ *
+ *   - `unverified` — the default: the scope was claimed by first
+ *     publish and nobody has proven a matching domain/brand.
+ *   - `verified`   — a registry operator confirmed the owner controls
+ *     the matching domain or brand (out-of-band check today; a
+ *     self-serve DNS flow is a future enhancement).
+ */
+export declare const SCOPE_VERIFICATIONS: readonly ["unverified", "verified"];
+export type ScopeVerification = (typeof SCOPE_VERIFICATIONS)[number];
+/**
+ * Scope-ownership row. One per claimed scope (`@acme`). Created by the
+ * FIRST authenticated publish into an unclaimed scope
+ * ({@link RegistryStorage.claimScope} — atomic first-writer-wins) and
+ * enforced on every subsequent publish: only `ownerSubject` may publish
+ * under `scope`.
+ *
+ * `ownerSubject` is the same subject namespace as
+ * {@link ArtifactVersionRow.publishedBy} — whatever the deployment's
+ * auth layer stamps into `AuthnContext.subject`.
+ *
+ * An `unverified` row is reclaimable by the registry operator in favor
+ * of a caller who proves ownership of the matching domain/brand; a
+ * `verified` row records that proof (`verifiedDomain`, `verifiedAt`).
+ */
+export interface ScopeOwnerRow {
+    /** PK. The npm-style scope, including the leading `@` (e.g. `@acme`). */
+    readonly scope: string;
+    /** Subject that owns publishes under this scope. */
+    readonly ownerSubject: string;
+    /** ISO timestamp of the claim (first publish or operator seed/transfer). */
+    readonly claimedAt: string;
+    readonly verification: ScopeVerification;
+    /** Domain whose control was proven, present when `verification: 'verified'`. */
+    readonly verifiedDomain?: string;
+    /** ISO timestamp of the verification, present when `verification: 'verified'`. */
+    readonly verifiedAt?: string;
+    /**
+     * F4 identity binding — per-scope allowlist of sigstore certificate
+     * identities (the Fulcio cert's SubjectAlternativeName) permitted to
+     * publish under this scope. Entries are EXACT literal identity
+     * strings — an email (`release@acme.com`) or a CI workflow identity
+     * URI (`https://github.com/acme/app/.github/workflows/publish.yml@refs/heads/main`).
+     * Regex/glob patterns are deliberately NOT stored server-side: an
+     * allowlist is a finite set of named signers, and pattern semantics
+     * would make the authorization decision unauditable.
+     *
+     * Case rule: ONE rule for every identity comparison — the publish
+     * gate matches entries against certificate SANs CASE-INSENSITIVELY
+     * (mirroring the verified-email rule), and the operator tooling
+     * lowercase-normalizes entries at write time.
+     *
+     * Enforcement (publish gate, sigstore-signed publishes only): when
+     * present and non-empty, one of the bundle certificate's SANs MUST
+     * match one of these entries. When absent, the deployment's default
+     * identity rule applies — a SAN must equal the publishing account's
+     * verified email where the deployment provides a resolver;
+     * deployments without one enforce identity only through this
+     * allowlist.
+     *
+     * Fail-closed corruption handling: a storage adapter that finds a
+     * MALFORMED value in this column (anything but an array of strings)
+     * MUST project it as {@link SAN_ALLOWLIST_INVALID}, never as absent
+     * — projecting corrupt policy data as "no allowlist" would silently
+     * downgrade the scope to the weaker default rule. The publish gate
+     * rejects sigstore publishes into such a scope with a
+     * storage-inconsistency error until an operator rewrites the column
+     * (set or clear). Writers MUST only ever write string arrays.
+     *
+     * Managed by the registry operator (never by publish); a first-
+     * publish claim always lands without one, and an ownership transfer
+     * drops it (the previous owner's signer identities must not survive
+     * into the new owner's scope).
+     */
+    readonly sanAllowlist?: readonly string[] | SanAllowlistInvalid;
+}
+/**
+ * Fail-closed marker a storage adapter projects when the
+ * {@link ScopeOwnerRow.sanAllowlist} column holds malformed data (see
+ * that field's docstring). Chosen as a bare string precisely because a
+ * string is itself a malformed value for the column — the marker
+ * round-trips as invalid through every storage impl, so corruption can
+ * never launder itself back into a valid policy.
+ */
+export declare const SAN_ALLOWLIST_INVALID: "invalid";
+export type SanAllowlistInvalid = typeof SAN_ALLOWLIST_INVALID;
 /**
  * `GET /pkg/{scope}/{name}/{version}` body.
  *
@@ -215,6 +323,14 @@ export interface ReadPkgResponse {
     readonly authorPublicKey?: string;
     readonly publishedAt: string;
     readonly publishedBy: string;
+    /**
+     * Verification state of the package's scope. Present only when the
+     * scope-ownership row was read; ABSENT when the scope state is
+     * unknown — absence is not `'unverified'`.
+     */
+    readonly scopeVerification?: ScopeVerification;
+    /** Domain whose control was proven — present only when `scopeVerification: 'verified'`. */
+    readonly verifiedDomain?: string;
 }
 /**
  * One row of `GET /search?…` results — a lightweight per-artifactId
@@ -228,6 +344,19 @@ export interface SearchResultEntry {
     readonly description?: string;
     readonly tags?: readonly string[];
     readonly publishedAt: string;
+    /** MCP tool bindings of the latest version, when the artifact declares or derives any. */
+    readonly mcpTools?: ReadonlyArray<McpToolBinding>;
+    /** How the bindings were produced: declared on the manifest, or derived from a blueprint contract. */
+    readonly mcpToolsSource?: McpToolBindingSource;
+    /**
+     * Verification state of the artifact's scope. Present only when the
+     * scope-ownership row was read; ABSENT when the scope state is
+     * unknown (unclaimed scope or a failed lookup) — absence is not
+     * `'unverified'`.
+     */
+    readonly scopeVerification?: ScopeVerification;
+    /** Domain whose control was proven — present only when `scopeVerification: 'verified'`. */
+    readonly verifiedDomain?: string;
 }
 /**
  * `GET /search?…` body. `nextCursor` is opaque (impl-defined: a
@@ -239,8 +368,8 @@ export interface SearchResponse {
     readonly nextCursor?: string;
 }
 /**
- * `GET /search` sort options. Supports a registry-web "Recent" view
- * that needs `publishedAt`-DESC ordering.
+ * `GET /search` sort options. Supports registry browse UIs that need
+ * a "Recent" view with `publishedAt`-DESC ordering.
  *
  *   - `recent` — order by {@link ArtifactsMetadataRow.publishedAt} DESC.
  *
@@ -331,7 +460,7 @@ export interface PublishResponseBody {
  * propagates to both the wire and the runtime membership check used
  * by downstream guards.
  */
-export declare const PUBLISH_ERROR_CODES: readonly ["unauthorized", "manifest_invalid", "bundle_required", "bundle_too_large", "conformance_failed", "bundle_hash_mismatch", "unknown_key", "signature_invalid", "version_exists", "internal"];
+export declare const PUBLISH_ERROR_CODES: readonly ["unauthorized", "manifest_invalid", "bundle_required", "bundle_too_large", "conformance_failed", "bundle_hash_mismatch", "visibility_algorithm_mismatch", "scope_forbidden", "identity_mismatch", "unknown_key", "signature_invalid", "version_exists", "internal"];
 export type PublishErrorCode = (typeof PUBLISH_ERROR_CODES)[number];
 /**
  * Closed enum for `GET /pkg/:scope/:name[/version]` read responses.
@@ -339,16 +468,21 @@ export type PublishErrorCode = (typeof PUBLISH_ERROR_CODES)[number];
  * `yanked` is the 410-Gone path — the version exists in metadata but
  * the publisher revoked it. Clients SHOULD treat this as a hard
  * failure (don't fall back to a different version automatically).
+ *
+ * There is deliberately NO `forbidden` code: an unauthorized read of
+ * a private row answers with the SAME `not_found` shape as a true
+ * miss, so the wire never confirms a private artifact exists.
  */
-export declare const READ_ERROR_CODES: readonly ["not_found", "forbidden", "invalid_request", "yanked", "server_error"];
+export declare const READ_ERROR_CODES: readonly ["not_found", "invalid_request", "yanked", "server_error"];
 export type ReadErrorCode = (typeof READ_ERROR_CODES)[number];
 /**
- * Closed enum for `GET /search` responses. Same posture as
- * {@link ReadErrorCode} minus the `yanked` path (search filters
- * yanked rows out of the result set; it never surfaces as a top-level
- * error).
+ * Closed enum for `GET /search` responses. Search serves only public
+ * metadata rows and takes no caller identity, so the surface has no
+ * authorization failure at all — just request validation and adapter
+ * faults. (`yanked` likewise never surfaces: search filters yanked
+ * rows out of the result set.)
  */
-export declare const SEARCH_ERROR_CODES: readonly ["forbidden", "invalid_request", "server_error"];
+export declare const SEARCH_ERROR_CODES: readonly ["invalid_request", "server_error"];
 export type SearchErrorCode = (typeof SEARCH_ERROR_CODES)[number];
 /**
  * Closed enum for `POST /author-keys` register responses. An operator
@@ -377,16 +511,23 @@ export type RegisterAuthorKeyErrorCode = (typeof REGISTER_AUTHOR_KEY_ERROR_CODES
  */
 export interface RegisterAuthorKeyRequestBody {
     readonly publicKeyBase64: string;
+    /** Optional human-readable name for the key (`--label`). */
+    readonly label?: string;
 }
 /**
  * `POST /author-keys` 200/201 response. Echoes the stored row so the
  * CLI can confirm the (subject, keyId) tuple the registry now knows.
- * 201 on first-write; 200 on idempotent re-register of the same row.
+ * 201 on first-write; 200 on idempotent re-register of the same row —
+ * in which case `createdAt`/`label` are the EXISTING row's values (a
+ * retry never rewrites them), and both are absent for rows written
+ * before the display enrichment.
  */
 export interface RegisterAuthorKeyResponseBody {
     readonly subject: string;
     readonly keyId: string;
     readonly publicKeyBase64: string;
+    readonly createdAt?: string;
+    readonly label?: string;
 }
 /**
  * `POST /author-keys` error body — same shape as the read/search
@@ -397,6 +538,89 @@ export interface RegisterAuthorKeyErrorBody {
     readonly message: string;
     readonly detail?: unknown;
 }
+/**
+ * Closed enum for `GET /author-keys` list responses.
+ *
+ *   - `unauthorized` — missing or invalid caller credentials (the
+ *                      route requires a verified bearer identity;
+ *                      there is no anonymous view of "my keys").
+ *   - `server_error` — unexpected adapter failure.
+ */
+export declare const LIST_AUTHOR_KEYS_ERROR_CODES: readonly ["unauthorized", "server_error"];
+export type ListAuthorKeysErrorCode = (typeof LIST_AUTHOR_KEYS_ERROR_CODES)[number];
+/**
+ * One key in the `GET /author-keys` 200 response. The caller's subject
+ * is hoisted to the body root ({@link ListAuthorKeysResponseBody}) so
+ * entries carry only per-key fields. `createdAt` / `label` are absent
+ * on rows registered before the display enrichment — consumers render
+ * the absence honestly.
+ */
+export interface AuthorKeyListEntry {
+    readonly keyId: string;
+    readonly publicKeyBase64: string;
+    readonly createdAt?: string;
+    readonly label?: string;
+}
+/**
+ * `GET /author-keys` 200 response — every signing key registered under
+ * the verified caller identity, newest first (`createdAt` DESC, rows
+ * without `createdAt` last, `keyId` tie-break).
+ */
+export interface ListAuthorKeysResponseBody {
+    readonly subject: string;
+    readonly keys: readonly AuthorKeyListEntry[];
+}
+/**
+ * `GET /author-keys` error body. `error` narrowed to
+ * {@link ListAuthorKeysErrorCode}.
+ */
+export interface ListAuthorKeysErrorBody {
+    readonly error: ListAuthorKeysErrorCode;
+    readonly message: string;
+    readonly detail?: unknown;
+}
+/**
+ * Closed enum for `DELETE /author-keys/{keyId}` responses.
+ *
+ *   - `unauthorized`    — missing or invalid caller credentials.
+ *   - `invalid_request` — missing/empty `keyId` path segment.
+ *   - `server_error`    — unexpected adapter failure.
+ */
+export declare const DELETE_AUTHOR_KEY_ERROR_CODES: readonly ["unauthorized", "invalid_request", "server_error"];
+export type DeleteAuthorKeyErrorCode = (typeof DELETE_AUTHOR_KEY_ERROR_CODES)[number];
+/**
+ * `DELETE /author-keys/{keyId}` 200 response. The delete is idempotent:
+ * `deleted: true` when a row existed and was removed, `deleted: false`
+ * when nothing existed under the caller's identity — including when the
+ * keyId belongs to a DIFFERENT subject, so key existence never leaks
+ * across accounts. Removal blocks FUTURE publishes signed with the key;
+ * versions already published stay valid (their signing key is pinned
+ * per version at publish time).
+ */
+export interface DeleteAuthorKeyResponseBody {
+    readonly keyId: string;
+    readonly deleted: boolean;
+}
+/**
+ * `DELETE /author-keys/{keyId}` error body. `error` narrowed to
+ * {@link DeleteAuthorKeyErrorCode}.
+ */
+export interface DeleteAuthorKeyErrorBody {
+    readonly error: DeleteAuthorKeyErrorCode;
+    readonly message: string;
+    readonly detail?: unknown;
+}
+/**
+ * THE 401 body for bearer-required registry routes — one constructor,
+ * exported beside the error-code enums, so every transport of this
+ * wire contract emits an identical unauthorized shape. Deliberately
+ * reason-agnostic: missing vs invalid credentials are distinguished in
+ * code paths and logs, never on the wire (less oracle surface).
+ */
+export declare function unauthorizedErrorBody(): {
+    readonly error: 'unauthorized';
+    readonly message: string;
+};
 /**
  * Publish-endpoint error body. `error` is narrowed to
  * {@link PublishErrorCode} so consumers get autocomplete +
@@ -454,6 +678,19 @@ export interface ArtifactScanFilter {
     readonly hook?: string;
     readonly tag?: string;
     readonly author?: string;
+    /**
+     * Exact MCP tool-name filter. Matches rows whose binding list has an
+     * entry with this tool name — with or without a server. Case-sensitive.
+     * Shared semantics: `matchesMcpToolFilters` in this package.
+     */
+    readonly tool?: string;
+    /**
+     * Exact MCP server-name filter. Matches rows whose binding list has an
+     * entry declaring this server; bare (server-less) entries never match.
+     * Combined with `tool`, requires a single entry carrying exactly that
+     * (server, tool) pair. Case-sensitive.
+     */
+    readonly server?: string;
     readonly limit?: number;
     readonly cursor?: string;
     /**
@@ -470,12 +707,15 @@ export interface ArtifactScanFilter {
  * Closed enum for `GET /pkg/{scope}/{name}` list-versions responses.
  *
  *   - `invalid_request` — missing or malformed `artifactId`.
- *   - `not_found`       — no metadata row for `artifactId`. Distinct
- *                         from "metadata present but every version is
- *                         private + caller unauthed" (that path returns
- *                         200 with `versions: []` — exposing 404 vs
- *                         empty would leak private-row existence).
- *   - `server_error`    — unexpected adapter failure.
+ *   - `not_found`       — no metadata row for `artifactId`, OR no
+ *                         version of it is visible to the caller.
+ *                         The two are DELIBERATELY indistinguishable:
+ *                         any difference between "does not exist" and
+ *                         "exists but you may not see it" is an
+ *                         existence oracle for private artifacts.
+ *   - `server_error`    — unexpected adapter failure. The message is
+ *                         generic by contract — raw storage error text
+ *                         never reaches the wire.
  */
 export declare const LIST_VERSIONS_ERROR_CODES: readonly ["invalid_request", "not_found", "server_error"];
 export type ListVersionsErrorCode = (typeof LIST_VERSIONS_ERROR_CODES)[number];

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,WAAoB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,qBAAsB,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,sMAWtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,kFAMnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2DAIrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,8EAKlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GACjB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,qBAAqB,CAAC;AAI1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,2DAI5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,WAAoB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,2GAA2G;IAC3G,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,qCAAsC,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,mBAAmB,CAAC;CACjE;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,SAAkB,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,OAAO,qBAAqB,CAAC;AAI/D;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,sGAAsG;IACtG,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,qBAAsB,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,+QActB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,qEAKnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,8CAGrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,8EAKlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,2CAG/B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,8DAIhC,CAAC;AACX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAAI;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAMA;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GACjB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,qBAAqB,CAAC;AAI1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB,2DAI5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/dist/types.js

@@ -8,8 +8,27 @@
  */
 export const ARTIFACTS_METADATA_SK = 'metadata#';
 /**
- * `GET /search` sort options. Supports a registry-web "Recent" view
- * that needs `publishedAt`-DESC ordering.
+ * Verification state of a claimed scope.
+ *
+ *   - `unverified` — the default: the scope was claimed by first
+ *     publish and nobody has proven a matching domain/brand.
+ *   - `verified`   — a registry operator confirmed the owner controls
+ *     the matching domain or brand (out-of-band check today; a
+ *     self-serve DNS flow is a future enhancement).
+ */
+export const SCOPE_VERIFICATIONS = ['unverified', 'verified'];
+/**
+ * Fail-closed marker a storage adapter projects when the
+ * {@link ScopeOwnerRow.sanAllowlist} column holds malformed data (see
+ * that field's docstring). Chosen as a bare string precisely because a
+ * string is itself a malformed value for the column — the marker
+ * round-trips as invalid through every storage impl, so corruption can
+ * never launder itself back into a valid policy.
+ */
+export const SAN_ALLOWLIST_INVALID = 'invalid';
+/**
+ * `GET /search` sort options. Supports registry browse UIs that need
+ * a "Recent" view with `publishedAt`-DESC ordering.
  *
  *   - `recent` — order by {@link ArtifactsMetadataRow.publishedAt} DESC.
  *
@@ -40,6 +59,9 @@ export const PUBLISH_ERROR_CODES = [
     'bundle_too_large',
     'conformance_failed',
     'bundle_hash_mismatch',
+    'visibility_algorithm_mismatch',
+    'scope_forbidden',
+    'identity_mismatch',
     'unknown_key',
     'signature_invalid',
     'version_exists',
@@ -51,22 +73,25 @@ export const PUBLISH_ERROR_CODES = [
  * `yanked` is the 410-Gone path — the version exists in metadata but
  * the publisher revoked it. Clients SHOULD treat this as a hard
  * failure (don't fall back to a different version automatically).
+ *
+ * There is deliberately NO `forbidden` code: an unauthorized read of
+ * a private row answers with the SAME `not_found` shape as a true
+ * miss, so the wire never confirms a private artifact exists.
  */
 export const READ_ERROR_CODES = [
     'not_found',
-    'forbidden',
     'invalid_request',
     'yanked',
     'server_error',
 ];
 /**
- * Closed enum for `GET /search` responses. Same posture as
- * {@link ReadErrorCode} minus the `yanked` path (search filters
- * yanked rows out of the result set; it never surfaces as a top-level
- * error).
+ * Closed enum for `GET /search` responses. Search serves only public
+ * metadata rows and takes no caller identity, so the surface has no
+ * authorization failure at all — just request validation and adapter
+ * faults. (`yanked` likewise never surfaces: search filters yanked
+ * rows out of the result set.)
  */
 export const SEARCH_ERROR_CODES = [
-    'forbidden',
     'invalid_request',
     'server_error',
 ];
@@ -90,16 +115,56 @@ export const REGISTER_AUTHOR_KEY_ERROR_CODES = [
     'key_conflict',
     'server_error',
 ];
+/**
+ * Closed enum for `GET /author-keys` list responses.
+ *
+ *   - `unauthorized` — missing or invalid caller credentials (the
+ *                      route requires a verified bearer identity;
+ *                      there is no anonymous view of "my keys").
+ *   - `server_error` — unexpected adapter failure.
+ */
+export const LIST_AUTHOR_KEYS_ERROR_CODES = [
+    'unauthorized',
+    'server_error',
+];
+/**
+ * Closed enum for `DELETE /author-keys/{keyId}` responses.
+ *
+ *   - `unauthorized`    — missing or invalid caller credentials.
+ *   - `invalid_request` — missing/empty `keyId` path segment.
+ *   - `server_error`    — unexpected adapter failure.
+ */
+export const DELETE_AUTHOR_KEY_ERROR_CODES = [
+    'unauthorized',
+    'invalid_request',
+    'server_error',
+];
+/**
+ * THE 401 body for bearer-required registry routes — one constructor,
+ * exported beside the error-code enums, so every transport of this
+ * wire contract emits an identical unauthorized shape. Deliberately
+ * reason-agnostic: missing vs invalid credentials are distinguished in
+ * code paths and logs, never on the wire (less oracle surface).
+ */
+export function unauthorizedErrorBody() {
+    return {
+        error: 'unauthorized',
+        message: 'a valid bearer credential is required in the Authorization header — missing or invalid token',
+    };
+}
 /**
  * Closed enum for `GET /pkg/{scope}/{name}` list-versions responses.
  *
  *   - `invalid_request` — missing or malformed `artifactId`.
- *   - `not_found`       — no metadata row for `artifactId`. Distinct
- *                         from "metadata present but every version is
- *                         private + caller unauthed" (that path returns
- *                         200 with `versions: []` — exposing 404 vs
- *                         empty would leak private-row existence).
- *   - `server_error`    — unexpected adapter failure.
+ *   - `not_found`       — no metadata row for `artifactId`, OR no
+ *                         version of it is visible to the caller.
+ *                         The two are DELIBERATELY indistinguishable:
+ *                         any difference between "does not exist" and
+ *                         "exists but you may not see it" is an
+ *                         existence oracle for private artifacts.
+ *   - `server_error`    — unexpected adapter failure. The message is
+ *                         generic by contract — raw storage error text
+ *                         never reaches the wire.
  */
 export const LIST_VERSIONS_ERROR_CODES = [
     'invalid_request',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/registry-core",
-  "version": "0.6.3",
+  "version": "0.8.0",
   "description": "Pure-TypeScript registry operations and storage interfaces for the ggui marketplace. No I/O, no HTTP — operations take typed inputs plus a storage deps bag and return discriminated-union results.",
   "keywords": [
     "ggui",
@@ -34,19 +34,29 @@
       "import": "./dist/types.js",
       "default": "./dist/types.js"
     },
+    "./install-command": {
+      "types": "./dist/install-command.d.ts",
+      "import": "./dist/install-command.js",
+      "default": "./dist/install-command.js"
+    },
     "./interfaces/registry-storage": {
       "types": "./dist/interfaces/registry-storage.d.ts",
       "import": "./dist/interfaces/registry-storage.js",
       "default": "./dist/interfaces/registry-storage.js"
+    },
+    "./ops/private-read-authz": {
+      "types": "./dist/ops/private-read-authz.d.ts",
+      "import": "./dist/ops/private-read-authz.js",
+      "default": "./dist/ops/private-read-authz.js"
     }
   },
   "dependencies": {
     "esbuild": "0.25.12",
     "oxc-parser": "^0.131.0",
     "zod": "^4.3.6",
-    "@ggui-ai/artifact-manifest": "0.6.3",
-    "@ggui-ai/protocol": "0.6.3",
-    "@ggui-ai/gadget-signing": "0.6.3"
+    "@ggui-ai/artifact-manifest": "0.8.0",
+    "@ggui-ai/gadget-signing": "0.8.0",
+    "@ggui-ai/protocol": "0.8.0"
   },
   "peerDependenciesMeta": {
     "vitest": {
@@ -54,9 +64,14 @@
     }
   },
   "devDependencies": {
+    "@sigstore/mock": "~0.12.1",
+    "@sigstore/protobuf-specs": "^0.5.1",
+    "@tufjs/repo-mock": "4.0.1",
     "@types/node": "^24.0.0",
+    "nock": "^13.5.6",
     "typescript": "^5.0.0",
-    "vitest": "^3.2.6"
+    "vitest": "^3.2.6",
+    "@ggui-ai/protocol-conformance": "0.8.0"
   },
   "repository": {
     "type": "git",