@ggui-ai/registry-core 0.7.0 → 0.8.0

package/dist/impls/memory-bundle-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-bundle-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-bundle-storage.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,aAAa,CA2Cf"}
+{"version":3,"file":"memory-bundle-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-bundle-storage.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,aAAa,CAkDf"}

package/dist/impls/memory-bundle-storage.js

@@ -3,38 +3,41 @@ export function inMemoryBundleStorage(options = {}) {
     const bundles = new Map();
     const signatures = new Map();
     const manifests = new Map();
-    const key = (scope, name, version) => `${scope}/${name}/${version}`;
+    // Visibility segments the key (H1 prefix split) — a blob written
+    // `public` must be invisible to a `private` read of the same triple,
+    // exactly like the prefix-split object keys of the durable impls.
+    const key = (scope, name, version, visibility) => `${visibility}/${scope}/${name}/${version}`;
     return {
-        async putBundle(scope, name, version, bytes) {
-            bundles.set(key(scope, name, version), new Uint8Array(bytes));
-            return this.bundleUrl(scope, name, version);
+        async putBundle(scope, name, version, visibility, bytes) {
+            bundles.set(key(scope, name, version, visibility), new Uint8Array(bytes));
+            return this.bundleUrl(scope, name, version, visibility);
         },
-        async getBundle(scope, name, version) {
-            const bytes = bundles.get(key(scope, name, version));
+        async getBundle(scope, name, version, visibility) {
+            const bytes = bundles.get(key(scope, name, version, visibility));
             return bytes === undefined ? null : new Uint8Array(bytes);
         },
-        async putSignature(scope, name, version, signature) {
-            signatures.set(key(scope, name, version), signature);
-            return this.signatureUrl(scope, name, version);
+        async putSignature(scope, name, version, visibility, signature) {
+            signatures.set(key(scope, name, version, visibility), signature);
+            return this.signatureUrl(scope, name, version, visibility);
         },
-        async getSignature(scope, name, version) {
-            return signatures.get(key(scope, name, version)) ?? null;
+        async getSignature(scope, name, version, visibility) {
+            return signatures.get(key(scope, name, version, visibility)) ?? null;
         },
-        async putManifest(scope, name, version, manifest) {
-            manifests.set(key(scope, name, version), manifest);
-            return this.manifestUrl(scope, name, version);
+        async putManifest(scope, name, version, visibility, manifest) {
+            manifests.set(key(scope, name, version, visibility), manifest);
+            return this.manifestUrl(scope, name, version, visibility);
         },
-        async getManifest(scope, name, version) {
-            return manifests.get(key(scope, name, version)) ?? null;
+        async getManifest(scope, name, version, visibility) {
+            return manifests.get(key(scope, name, version, visibility)) ?? null;
         },
-        bundleUrl(scope, name, version) {
-            return `${bundleHost}/bundles/${scope}/${name}/${version}/bundle.js`;
+        bundleUrl(scope, name, version, visibility) {
+            return `${bundleHost}/bundles/${visibility}/${scope}/${name}/${version}/bundle.js`;
         },
-        signatureUrl(scope, name, version) {
-            return `${bundleHost}/bundles/${scope}/${name}/${version}/bundle.js.sig`;
+        signatureUrl(scope, name, version, visibility) {
+            return `${bundleHost}/bundles/${visibility}/${scope}/${name}/${version}/bundle.js.sig`;
         },
-        manifestUrl(scope, name, version) {
-            return `${bundleHost}/bundles/${scope}/${name}/${version}/manifest.json`;
+        manifestUrl(scope, name, version, visibility) {
+            return `${bundleHost}/bundles/${visibility}/${scope}/${name}/${version}/manifest.json`;
         },
     };
 }

package/dist/impls/memory-registry-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-registry-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-registry-storage.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAK3C,wBAAgB,uBAAuB,IAAI,eAAe,CA2JzD"}
+{"version":3,"file":"memory-registry-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-registry-storage.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAM3C,wBAAgB,uBAAuB,IAAI,eAAe,CA2JzD"}

package/dist/impls/memory-registry-storage.js

@@ -1,4 +1,5 @@
 import { AuthorKeyAlreadyExistsError, } from '../interfaces/registry-storage.js';
+import { matchesMcpToolFilters } from '../mcp-tool-filters.js';
 const DEFAULT_LIMIT = 50;
 const MAX_LIMIT = 200;
 export function inMemoryRegistryStorage() {
@@ -177,6 +178,8 @@ function rowMatchesFilter(row, q) {
         return false;
     if (q.hook !== undefined && row.hook !== q.hook)
         return false;
+    if (!matchesMcpToolFilters(row.mcpTools, q))
+        return false;
     if (q.tag !== undefined) {
         if (row.tags === undefined || !row.tags.includes(q.tag))
             return false;

package/dist/index.d.ts

@@ -10,11 +10,12 @@
 export type { AuthnContext } from './interfaces/authn.js';
 export type { BundleStorage } from './interfaces/bundle-storage.js';
 export { AuthorKeyAlreadyExistsError, type PutAuthorKeyOptions, type RegistryStorage, type ScopeOwnerExpectation, } from './interfaces/registry-storage.js';
-export { ARTIFACTS_METADATA_SK, type ArtifactKind, type ArtifactScanFilter, type ArtifactVersionRow, type ArtifactsMetadataRow, type AuthorKeyListEntry, type AuthorKeyRow, type CompiledBlobRow, DELETE_AUTHOR_KEY_ERROR_CODES, type DeleteAuthorKeyErrorBody, type DeleteAuthorKeyErrorCode, type DeleteAuthorKeyResponseBody, type ErrorBody, LIST_AUTHOR_KEYS_ERROR_CODES, type ListAuthorKeysErrorBody, type ListAuthorKeysErrorCode, type ListAuthorKeysResponseBody, LIST_VERSIONS_ERROR_CODES, type ListVersionsErrorBody, type ListVersionsErrorCode, type ListVersionsResponse, PUBLISH_ERROR_CODES, type PublishErrorBody, type PublishErrorCode, type PublishRequestBody, type PublishResponseBody, READ_ERROR_CODES, type ReadErrorBody, type ReadErrorCode, type ReadPkgResponse, REGISTER_AUTHOR_KEY_ERROR_CODES, type RegisterAuthorKeyErrorBody, type RegisterAuthorKeyErrorCode, type RegisterAuthorKeyRequestBody, type RegisterAuthorKeyResponseBody, SCOPE_VERIFICATIONS, type ScopeOwnerRow, type ScopeVerification, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, type SearchErrorBody, type SearchErrorCode, type SearchResponse, type SearchResultEntry, type SearchSort, type VersionListEntry, type Visibility, } from './types.js';
+export { ARTIFACTS_METADATA_SK, type ArtifactKind, type ArtifactScanFilter, type ArtifactVersionRow, type ArtifactsMetadataRow, type AuthorKeyListEntry, type AuthorKeyRow, type CompiledBlobRow, DELETE_AUTHOR_KEY_ERROR_CODES, type DeleteAuthorKeyErrorBody, type DeleteAuthorKeyErrorCode, type DeleteAuthorKeyResponseBody, type ErrorBody, LIST_AUTHOR_KEYS_ERROR_CODES, type ListAuthorKeysErrorBody, type ListAuthorKeysErrorCode, type ListAuthorKeysResponseBody, LIST_VERSIONS_ERROR_CODES, type ListVersionsErrorBody, type ListVersionsErrorCode, type ListVersionsResponse, PUBLISH_ERROR_CODES, type PublishErrorBody, type PublishErrorCode, type PublishRequestBody, type PublishResponseBody, READ_ERROR_CODES, type ReadErrorBody, type ReadErrorCode, type ReadPkgResponse, REGISTER_AUTHOR_KEY_ERROR_CODES, type RegisterAuthorKeyErrorBody, type RegisterAuthorKeyErrorCode, type RegisterAuthorKeyRequestBody, type RegisterAuthorKeyResponseBody, SAN_ALLOWLIST_INVALID, type SanAllowlistInvalid, SCOPE_VERIFICATIONS, type ScopeOwnerRow, type ScopeVerification, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, type SearchErrorBody, type SearchErrorCode, type SearchResponse, type SearchResultEntry, type SearchSort, type VersionListEntry, type Visibility, } from './types.js';
 export { compileBlueprint, type CompileBlueprintErr, type CompileBlueprintOk, type CompileBlueprintResult, } from './ops/compile.js';
 export { checkConformance, MAX_BLUEPRINT_SOURCE_BYTES, type BlueprintProbeRunner, type ConformanceError, type ConformanceErrorCode, type ConformanceFailureCode, type ConformanceRequestPayload, type ConformanceResponseBody, } from './ops/conformance.js';
-export { publishArtifact, MAX_BUNDLE_BYTES, RESERVED_SCOPES, type PublishArtifactDeps, type PublishArtifactInput, type PublishArtifactResult, } from './ops/publish.js';
+export { publishArtifact, MAX_BUNDLE_BYTES, RESERVED_SCOPES, type PublishArtifactDeps, type PublishArtifactInput, type PublishArtifactResult, type VerifiedEmailResolver, } from './ops/publish.js';
 export { readArtifact, type ReadArtifactDeps, type ReadArtifactInput, type ReadArtifactResult, } from './ops/read.js';
+export { artifactScope, canReadPrivateArtifact, createScopeOwnerResolver, } from './ops/private-read-authz.js';
 export { listArtifactVersions, type ListArtifactVersionsDeps, type ListArtifactVersionsInput, type ListArtifactVersionsResult, } from './ops/list-versions.js';
 export { searchArtifacts, type SearchArtifactsDeps, type SearchArtifactsInput, type SearchArtifactsResult, } from './ops/search.js';
 export { registerAuthorKey, type RegisterAuthorKeyDeps, type RegisterAuthorKeyInput, type RegisterAuthorKeyResult, } from './ops/register-author-key.js';
@@ -22,6 +23,7 @@ export { listAuthorKeys, type ListAuthorKeysDeps, type ListAuthorKeysResult, } f
 export { deleteAuthorKey, type DeleteAuthorKeyDeps, type DeleteAuthorKeyInput, type DeleteAuthorKeyResult, } from './ops/delete-author-key.js';
 export { inMemoryRegistryStorage } from './impls/memory-registry-storage.js';
 export { inMemoryBundleStorage, type InMemoryBundleStorageOptions, } from './impls/memory-bundle-storage.js';
+export { matchesMcpToolFilters } from './mcp-tool-filters.js';
 export { installCommand, type InstallCommandOptions, } from './install-command.js';
 export { compareSemver } from './utils/semver.js';
 export { base64Encode, safeBase64Decode, sha384Base64 } from './utils/base64.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -9,12 +9,13 @@
  */
 export { AuthorKeyAlreadyExistsError, } from './interfaces/registry-storage.js';
 // Types — rows + wire shapes
-export { ARTIFACTS_METADATA_SK, DELETE_AUTHOR_KEY_ERROR_CODES, LIST_AUTHOR_KEYS_ERROR_CODES, LIST_VERSIONS_ERROR_CODES, PUBLISH_ERROR_CODES, READ_ERROR_CODES, REGISTER_AUTHOR_KEY_ERROR_CODES, SCOPE_VERIFICATIONS, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, } from './types.js';
+export { ARTIFACTS_METADATA_SK, DELETE_AUTHOR_KEY_ERROR_CODES, LIST_AUTHOR_KEYS_ERROR_CODES, LIST_VERSIONS_ERROR_CODES, PUBLISH_ERROR_CODES, READ_ERROR_CODES, REGISTER_AUTHOR_KEY_ERROR_CODES, SAN_ALLOWLIST_INVALID, SCOPE_VERIFICATIONS, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, } from './types.js';
 // Operations
 export { compileBlueprint, } from './ops/compile.js';
 export { checkConformance, MAX_BLUEPRINT_SOURCE_BYTES, } from './ops/conformance.js';
 export { publishArtifact, MAX_BUNDLE_BYTES, RESERVED_SCOPES, } from './ops/publish.js';
 export { readArtifact, } from './ops/read.js';
+export { artifactScope, canReadPrivateArtifact, createScopeOwnerResolver, } from './ops/private-read-authz.js';
 export { listArtifactVersions, } from './ops/list-versions.js';
 export { searchArtifacts, } from './ops/search.js';
 export { registerAuthorKey, } from './ops/register-author-key.js';
@@ -23,6 +24,8 @@ export { deleteAuthorKey, } from './ops/delete-author-key.js';
 // In-memory impls
 export { inMemoryRegistryStorage } from './impls/memory-registry-storage.js';
 export { inMemoryBundleStorage, } from './impls/memory-bundle-storage.js';
+// Shared scan-filter semantics
+export { matchesMcpToolFilters } from './mcp-tool-filters.js';
 // Utils
 export { installCommand, } from './install-command.js';
 export { compareSemver } from './utils/semver.js';

package/dist/interfaces/bundle-storage.d.ts

@@ -2,8 +2,8 @@
  * `BundleStorage` — bundle + signature + manifest blob storage. A
  * hosted implementation may serve blobs from object storage behind a
  * CDN; the open-source server backs it with the filesystem under
- * `<root>/bundles/<scope>/<name>/<version>/`. A memory impl is
- * provided for tests.
+ * `<root>/bundles/<visibility>/<scope>/<name>/<version>/`. A memory
+ * impl is provided for tests.
  *
  * Each `put*` method returns the fully-qualified URL the consumer
  * (iframe runtime, install CLI) can fetch. The URL prefix is
@@ -11,17 +11,33 @@
  * CDN-fronted implementation, or `http://localhost:9001` (or
  * whatever the server is bound to) for the open-source server.
  *
- * Bundles are immutable post-publish. Responses MUST emit
- * `Cache-Control: public, max-age=31536000, immutable` — SRI integrity
- * depends on it. The OSS server's bundle route sets this header
- * explicitly; a CDN-fronted implementation sets it via its cache
- * policy.
+ * ## Visibility-split key layout (load-bearing)
+ *
+ * Every blob lives under a visibility-segmented key:
+ *
+ *   bundles/public/<scope>/<name>/<version>/{bundle.js,bundle.js.sig,manifest.json}
+ *   bundles/private/<scope>/<name>/<version>/{...}
+ *
+ * Placement IS the access-control boundary: the `bundles/public/`
+ * prefix may be served anonymously (CDN, static route); the
+ * `bundles/private/` prefix MUST only be reachable through an
+ * authenticated route that authorizes the caller against the
+ * artifact's publisher or scope owner. An impl that flattens the two
+ * prefixes back together silently republishes every private artifact.
+ *
+ * Bundles are immutable post-publish. Public-prefix responses MUST
+ * emit `Cache-Control: public, max-age=31536000, immutable` — SRI
+ * integrity depends on it. Private-prefix responses stay immutable but
+ * MUST NOT be shared-cacheable (`Cache-Control: private, …`). The OSS
+ * server's bundle routes set these headers explicitly; a CDN-fronted
+ * implementation sets the public policy on its cache behavior.
  *
  * ## Protocol & Contract Bar
  *
  * **Parties:**
  * - Producer: {@link publishArtifact} writes bundle (gadgets),
- *   signature (gadgets), and manifest (always) on every publish.
+ *   signature (gadgets), and manifest (always) on every publish, at
+ *   the key the manifest's `visibility` selects.
  * - Consumer: iframe-runtime (bundleUrl), install CLI (signatureUrl,
  *   manifestUrl), audit tooling (manifestUrl on yanked versions).
  *
@@ -31,49 +47,57 @@
  *   per-version row immutability invariant on {@link RegistryStorage}
  *   prevents true re-publishes; the bundle-storage layer needs no
  *   conflict semantics).
+ * - Key composition MUST segment on `visibility` — a blob written
+ *   `public` is invisible to a `private` read of the same triple, and
+ *   vice versa.
  * - URL composition methods (`bundleUrl`, `signatureUrl`,
- *   `manifestUrl`) MUST be pure — no I/O, no async. Consumers cache
- *   URLs liberally.
+ *   `manifestUrl`) MUST be pure — no I/O, no async — and MUST embed
+ *   the same visibility segment the corresponding `put*` used, so the
+ *   persisted row URLs point at the blob's real location. Consumers
+ *   cache URLs liberally.
  *
  * **Failure mode:**
  * - Transport-level failures throw; the publish op wraps and returns
  *   500.
- * - Missing-blob reads return `null`; never throw.
+ * - Missing-blob reads return `null`; never throw. A visibility
+ *   mismatch reads as a miss.
  *
  * **Observable violation:**
  * - Contract test {@link bundleStorageContract} covers: bundle
  *   round-trip preserves bytes; signature round-trip preserves the
  *   structured object; manifest round-trip preserves the full
- *   discriminated-union shape; URL methods compose without side effects;
- *   missing reads return null.
+ *   discriminated-union shape; URL methods compose without side effects
+ *   and embed the visibility segment; missing reads return null;
+ *   cross-visibility reads return null.
  */
 import type { ArtifactManifest } from '@ggui-ai/artifact-manifest';
 import type { GadgetSignature } from '@ggui-ai/gadget-signing';
+import type { Visibility } from '../types.js';
 export interface BundleStorage {
-    /** Write gadget bundle bytes. Returns the public URL. */
-    putBundle(scope: string, name: string, version: string, bytes: Uint8Array): Promise<string>;
-    /** Read gadget bundle bytes. `null` on miss. */
-    getBundle(scope: string, name: string, version: string): Promise<Uint8Array | null>;
+    /** Write gadget bundle bytes. Returns the fetch URL. */
+    putBundle(scope: string, name: string, version: string, visibility: Visibility, bytes: Uint8Array): Promise<string>;
+    /** Read gadget bundle bytes. `null` on miss (including visibility mismatch). */
+    getBundle(scope: string, name: string, version: string, visibility: Visibility): Promise<Uint8Array | null>;
     /**
-     * Write the signature envelope. Returns the public URL.
+     * Write the signature envelope. Returns the fetch URL.
      *
      * The envelope is a {@link GadgetSignature} — a discriminated union
      * over `algorithm` (`ed25519` for private gadgets, `sigstore-cosign`
      * for public). Impls serialize via `JSON.stringify(signature)` and
      * store the resulting bytes verbatim.
      */
-    putSignature(scope: string, name: string, version: string, signature: GadgetSignature): Promise<string>;
-    /** Read the signature envelope. `null` on miss. */
-    getSignature(scope: string, name: string, version: string): Promise<GadgetSignature | null>;
-    /** Write the manifest verbatim. Returns the public URL. */
-    putManifest(scope: string, name: string, version: string, manifest: ArtifactManifest): Promise<string>;
-    /** Read the manifest. `null` on miss. */
-    getManifest(scope: string, name: string, version: string): Promise<ArtifactManifest | null>;
-    /** Compose the public bundle URL. No I/O. */
-    bundleUrl(scope: string, name: string, version: string): string;
-    /** Compose the public signature URL. No I/O. */
-    signatureUrl(scope: string, name: string, version: string): string;
-    /** Compose the public manifest URL. No I/O. */
-    manifestUrl(scope: string, name: string, version: string): string;
+    putSignature(scope: string, name: string, version: string, visibility: Visibility, signature: GadgetSignature): Promise<string>;
+    /** Read the signature envelope. `null` on miss (including visibility mismatch). */
+    getSignature(scope: string, name: string, version: string, visibility: Visibility): Promise<GadgetSignature | null>;
+    /** Write the manifest verbatim. Returns the fetch URL. */
+    putManifest(scope: string, name: string, version: string, visibility: Visibility, manifest: ArtifactManifest): Promise<string>;
+    /** Read the manifest. `null` on miss (including visibility mismatch). */
+    getManifest(scope: string, name: string, version: string, visibility: Visibility): Promise<ArtifactManifest | null>;
+    /** Compose the bundle URL (embeds the visibility segment). No I/O. */
+    bundleUrl(scope: string, name: string, version: string, visibility: Visibility): string;
+    /** Compose the signature URL (embeds the visibility segment). No I/O. */
+    signatureUrl(scope: string, name: string, version: string, visibility: Visibility): string;
+    /** Compose the manifest URL (embeds the visibility segment). No I/O. */
+    manifestUrl(scope: string, name: string, version: string, visibility: Visibility): string;
 }
 //# sourceMappingURL=bundle-storage.d.ts.map

package/dist/interfaces/bundle-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/bundle-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,gDAAgD;IAChD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAEpF;;;;;;;OAOG;IACH,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,mDAAmD;IACnD,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEnC,2DAA2D;IAC3D,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,yCAAyC;IACzC,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEpC,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAChE,gDAAgD;IAChD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACnE,+CAA+C;IAC/C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnE"}
+{"version":3,"file":"bundle-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/bundle-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,SAAS,CACP,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,gFAAgF;IAChF,SAAS,CACP,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE9B;;;;;;;OAOG;IACH,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,mFAAmF;IACnF,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEnC,0DAA0D;IAC1D,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,yEAAyE;IACzE,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEpC,sEAAsE;IACtE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IACxF,yEAAyE;IACzE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IAC3F,wEAAwE;IACxE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;CAC3F"}

package/dist/interfaces/registry-storage.d.ts

@@ -53,6 +53,13 @@
  *   rows MUST come back ordered by `publishedAt` descending (newest
  *   first), globally correct across the full cursor chain. Without an
  *   `order`, consumers MUST treat ordering as non-deterministic.
+ * - {@link scanArtifacts} MUST apply the `tool` / `server` filter
+ *   dimensions with the shared semantics of `matchesMcpToolFilters`:
+ *   `tool` matches any binding entry with that tool name; `server`
+ *   matches entries declaring that server (bare entries never match);
+ *   together they require one entry with exactly that (server, tool)
+ *   pair. Case-sensitive exact, AND-composed with every other
+ *   dimension.
  *
  * **Failure mode:**
  * - Transport-level failures (store throttling, disk full) throw.
@@ -122,6 +129,10 @@ export interface RegistryStorage {
      * When `filter.order` is `'recent'`, rows MUST be returned newest
      * first by `publishedAt`, globally correct across the full cursor
      * chain — see the Obligations section above.
+     *
+     * `filter.tool` / `filter.server` follow the shared MCP-binding
+     * filter semantics (`matchesMcpToolFilters`) — see the Obligations
+     * section above.
      */
     scanArtifacts(filter: ArtifactScanFilter): Promise<{
         readonly rows: readonly ArtifactsMetadataRow[];

package/dist/interfaces/registry-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/registry-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,aAAa,EACd,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACtD,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC;AAE9B,MAAM,WAAW,eAAe;IAE9B,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;QACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,oBAAoB,EAAE,CAAC;QAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAGH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,0BAA0B,CACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxE;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,oBAAoB,CAClB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAC1C,CAAC;IAGF;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC3E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CACd,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAG9C,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,YAAY,CACV,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IAClE;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE"}
+{"version":3,"file":"registry-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/registry-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,aAAa,EACd,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACtD,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC;AAE9B,MAAM,WAAW,eAAe;IAE9B,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;QACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,oBAAoB,EAAE,CAAC;QAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAGH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,0BAA0B,CACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxE;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,oBAAoB,CAClB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAC1C,CAAC;IAGF;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC3E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CACd,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAG9C,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,YAAY,CACV,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IAClE;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE"}

package/dist/mcp-tool-filters.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared MCP-tool search-filter predicate — the reference semantics
+ * every {@link RegistryStorage.scanArtifacts} implementation must
+ * reproduce for the `tool` / `server` filter dimensions:
+ *
+ *   - `tool` only    → any binding entry with that tool name (with or
+ *                      without a `server`).
+ *   - `server` only  → any binding entry declaring that server; bare
+ *                      (server-less) entries never match.
+ *   - both           → a single entry with exactly that (server, tool)
+ *                      pair.
+ *   - neither        → always `true` (the filter is inactive).
+ *
+ * Matching is case-sensitive exact on both dimensions — MCP tool names
+ * are case-sensitive. AND-composes with every other scan-filter
+ * dimension; artifacts without bindings never match an active filter.
+ */
+import type { McpToolBinding } from '@ggui-ai/artifact-manifest';
+export declare function matchesMcpToolFilters(bindings: ReadonlyArray<McpToolBinding> | undefined, filters: {
+    tool?: string;
+    server?: string;
+}): boolean;
+//# sourceMappingURL=mcp-tool-filters.d.ts.map

package/dist/mcp-tool-filters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-filters.d.ts","sourceRoot":"","sources":["../src/mcp-tool-filters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,SAAS,EACnD,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAST"}

package/dist/mcp-tool-filters.js

@@ -0,0 +1,14 @@
+export function matchesMcpToolFilters(bindings, filters) {
+    const { tool, server } = filters;
+    if (tool === undefined && server === undefined)
+        return true;
+    if (bindings === undefined || bindings.length === 0)
+        return false;
+    return bindings.some((binding) => {
+        if (tool !== undefined && binding.tool !== tool)
+            return false;
+        if (server !== undefined && binding.server !== server)
+            return false;
+        return true;
+    });
+}

package/dist/ops/list-versions.d.ts

@@ -7,12 +7,20 @@
  *   1. Point-read the metadata row via {@link RegistryStorage.getArtifactMetadata}.
  *      Missing metadata → 404 (`not_found`).
  *   2. Fetch all version rows via {@link RegistryStorage.listArtifactVersions}.
- *   3. Filter out private rows for unauthenticated callers — same gate
- *      as the read op's `visibility === 'private' && authn === undefined`
- *      branch. We do NOT 403 on a fully-private artifact for an unauthed
- *      caller; we 200 with `versions: []` so the wire response doesn't
- *      leak the existence of a private artifact (cf. GitHub's 404-on-
- *      private-repo behaviour).
+ *   3. Filter out private rows the caller cannot read — the same
+ *      ownership rule as the read op ({@link canReadPrivateArtifact}:
+ *      publisher or scope owner). Unreadable rows are FILTERED, never
+ *      errored: an unauthorized caller (anonymous or authenticated)
+ *      gets the readable subset. When NOTHING is readable, the
+ *      response is the SAME 404 `not_found` as a true miss — a 200
+ *      `versions: []` would differ from the miss shape and that
+ *      difference is an existence oracle (cf. GitHub's
+ *      404-on-private-repo behaviour). The scope-owner lookup is lazy,
+ *      memoized, and fail-closed ({@link createScopeOwnerResolver}):
+ *      at most one {@link RegistryStorage.getScopeOwner} call per
+ *      request; none when every row is public, the caller published
+ *      every private row, or the caller is anonymous; a lookup fault
+ *      denies instead of erroring.
  *   4. Sort by semver DESC so the latest version is first. Yanked rows
  *      are NOT filtered — they stay in the list with `yanked: true`
  *      so the UI can show "this version was yanked".
@@ -38,10 +46,11 @@ export interface ListArtifactVersionsInput {
 export interface ListArtifactVersionsDeps {
     readonly storage: RegistryStorage;
     /**
-     * Optional — when undefined, the op filters `private` versions OUT
-     * of the response. Authenticated callers see every version they own
-     * (the storage layer's row-level visibility filter is the source of
-     * truth; this op just honours it).
+     * Optional — the verified caller context, produced by the
+     * transport's own credential verification. Private versions appear
+     * in the response only for the caller who published them or the
+     * owner of the artifact's scope ({@link canReadPrivateArtifact});
+     * every other caller — anonymous included — gets the public subset.
      */
     readonly authn?: AuthnContext;
 }

package/dist/ops/list-versions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-versions.d.ts","sourceRoot":"","sources":["../../src/ops/list-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAEV,qBAAqB,EAErB,oBAAoB,EAErB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAGzE,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;CAC/B;AAED,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;CACtC,CAAC;AAEN,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,EAChC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CA6DrC"}
+{"version":3,"file":"list-versions.d.ts","sourceRoot":"","sources":["../../src/ops/list-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAEV,qBAAqB,EAErB,oBAAoB,EAErB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAOzE,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;CAC/B;AAED,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;CACtC,CAAC;AAEN,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,EAChC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAsErC"}

package/dist/ops/list-versions.js

@@ -1,4 +1,5 @@
 import { compareSemver } from '../utils/semver.js';
+import { canReadPrivateArtifact, createScopeOwnerResolver, } from './private-read-authz.js';
 export async function listArtifactVersions(input, deps) {
     if (typeof input.artifactId !== 'string' || input.artifactId.length === 0) {
         return errorResult(400, 'invalid_request', 'missing artifactId');
@@ -12,10 +13,11 @@ export async function listArtifactVersions(input, deps) {
         metadataExists = metadata !== null;
     }
     catch (err) {
-        return errorResult(500, 'server_error', `failed to read metadata: ${err instanceof Error ? err.message : String(err)}`);
+        logStorageFailure('read metadata', input.artifactId, err);
+        return errorResult(500, 'server_error', 'failed to list versions');
     }
     if (!metadataExists) {
-        return errorResult(404, 'not_found', `no such artifact: ${input.artifactId}`);
+        return notFoundResult(input);
     }
     // Step 2 — fetch all version rows.
     let rows;
@@ -23,18 +25,31 @@ export async function listArtifactVersions(input, deps) {
         rows = await deps.storage.listArtifactVersions(input.artifactId);
     }
     catch (err) {
-        return errorResult(500, 'server_error', `failed to list versions: ${err instanceof Error ? err.message : String(err)}`);
+        logStorageFailure('list version rows', input.artifactId, err);
+        return errorResult(500, 'server_error', 'failed to list versions');
     }
-    // Step 3 — visibility filter. Unauthed callers see only public rows;
-    // authed callers see everything (finer org-membership gating is a
-    // future concern — for now, "authed" === "can see your own private
-    // rows" is captured by the verified caller subject being non-null).
+    // Step 3 — ownership filter. A private row stays in the list only
+    // when the caller may read it under the shared rule (publisher or
+    // scope owner). All rows share one artifactId, hence one scope —
+    // the shared resolver memoizes the lazy owner lookup (one
+    // getScopeOwner call at most; none for public rows / anonymous
+    // callers / publisher-only matches) and fails CLOSED on a storage
+    // fault (deny + server-side log, never a distinctive error status).
+    const getScopeOwner = createScopeOwnerResolver(deps.storage, input.artifactId);
     const visibleRows = [];
     for (const row of rows) {
-        if (row.visibility === 'private' && deps.authn === undefined)
+        if (row.visibility === 'private' &&
+            !(await canReadPrivateArtifact(deps.authn, row, getScopeOwner))) {
             continue;
+        }
         visibleRows.push(row);
     }
+    // No visible versions ⇒ answer exactly as a true miss. Emitting a
+    // 200 `versions: []` here would differ from the miss shape, and
+    // that difference is an existence oracle for private artifacts.
+    if (visibleRows.length === 0) {
+        return notFoundResult(input);
+    }
     // Step 4 — semver DESC sort. `compareSemver(a, b)` returns -1/0/1
     // matching ascending order; flip the sign for DESC.
     const sorted = [...visibleRows].sort((a, b) => -compareSemver(a.version, b.version));
@@ -55,6 +70,26 @@ function rowToEntry(row) {
         visibility: row.visibility,
     };
 }
+/**
+ * The one not-found projection — used for a true miss AND an artifact
+ * with no versions visible to the caller, so the two responses cannot
+ * drift apart (drift would reintroduce the existence signal).
+ */
+function notFoundResult(input) {
+    return errorResult(404, 'not_found', `no such artifact: ${input.artifactId}`);
+}
+/**
+ * Structured server-side failure log. Raw storage error text stays
+ * OUT of wire bodies (it can carry backend identifiers a caller has
+ * no business seeing); this log line is the operator's copy.
+ */
+function logStorageFailure(operation, artifactId, err) {
+    // eslint-disable-next-line no-console -- server-side operator signal; the wire stays generic
+    console.error(`registry list-versions: failed to ${operation}`, {
+        artifactId,
+        error: err instanceof Error ? err.message : String(err),
+    });
+}
 function errorResult(status, error, message) {
     return { ok: false, status, body: { error, message } };
 }

package/dist/ops/private-read-authz.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The single ownership rule for private-row reads.
+ *
+ * A `visibility: 'private'` row is readable when the verified caller
+ * is the row's publisher (`authn.subject === row.publishedBy`) OR the
+ * owner of the artifact's scope (`authn.subject === ScopeOwnerRow.
+ * ownerSubject`). Everyone else — including anonymous callers — MUST
+ * receive a response indistinguishable from "no such artifact" so a
+ * probe can never confirm a private artifact exists.
+ *
+ * Every read-path consumer (the read op, the list-versions op, any
+ * transport route that serves private artifact content — bundle and
+ * signature byte routes included) MUST authorize through this one
+ * predicate. A second hand-rolled comparison is how the rule forks;
+ * import this instead. Note the byte-route obligation explicitly:
+ * metadata gating alone is insufficient while bundle URLs serve
+ * private bytes anonymously — a deployment MUST place its private
+ * bundle storage behind a route that applies this same predicate
+ * (the hosted deployment's public/private storage-prefix split does
+ * exactly that).
+ *
+ * ## Protocol & Contract Bar
+ *
+ * **Parties:** read-path ops and transport routes are the callers;
+ * the deployment's {@link RegistryStorage.getScopeOwner} backs the
+ * lazy scope-owner lookup.
+ *
+ * **Obligations:** callers MUST pass the verified caller context (or
+ * `undefined` for anonymous) — never a caller-supplied subject. The
+ * `getScopeOwner` thunk MUST resolve the ownership row for the
+ * artifact's scope (see {@link artifactScope}); it is invoked at most
+ * once, and ONLY when the caller is authenticated and not the
+ * publisher — the hot public path and the publisher fast path incur
+ * zero extra storage reads. Callers SHOULD build the thunk via
+ * {@link createScopeOwnerResolver}, which adds memoization and the
+ * fail-closed error posture.
+ *
+ * **Failure mode:** {@link createScopeOwnerResolver} resolves a
+ * storage failure to `null` (unclaimed) — the owner arm DENIES, the
+ * caller answers with its ordinary miss shape, and the fault is
+ * logged server-side. Failing open would serve the private row;
+ * failing loud (a 5xx only private rows can trigger) would leak
+ * existence. A hand-built thunk that rejects propagates to the
+ * caller instead — prefer the resolver.
+ *
+ * **Observable violation:** a private row served to a subject that is
+ * neither its `publishedBy` nor its scope's `ownerSubject` — pinned
+ * by the op suites (`read.test.ts`, `list-versions.test.ts`) and the
+ * server parity suite.
+ */
+import type { AuthnContext } from '../interfaces/authn.js';
+import type { RegistryStorage } from '../interfaces/registry-storage.js';
+import type { ArtifactVersionRow, ScopeOwnerRow } from '../types.js';
+/**
+ * Decide whether `authn` may read a private row.
+ *
+ * @param authn verified caller context; `undefined` for anonymous.
+ * @param row the private row under decision (only `publishedBy` is
+ *   consulted — pass the full row or a narrowed projection).
+ * @param getScopeOwner lazy scope-owner lookup for the artifact's
+ *   scope. Called at most once, only when the publisher fast path
+ *   misses. Build it with {@link createScopeOwnerResolver} for
+ *   memoization + fail-closed semantics.
+ */
+export declare function canReadPrivateArtifact(authn: AuthnContext | undefined, row: Pick<ArtifactVersionRow, 'publishedBy'>, getScopeOwner: () => Promise<ScopeOwnerRow | null>): Promise<boolean>;
+/**
+ * Build the memoized, fail-closed `getScopeOwner` thunk for
+ * {@link canReadPrivateArtifact}.
+ *
+ *   - **Lazy** — no storage read happens until the owner arm is
+ *     actually needed (public rows, anonymous callers, and publisher
+ *     matches never trigger one).
+ *   - **Memoized** — a caller checking many rows of one artifact
+ *     (the list op) pays for at most one lookup.
+ *   - **Fail-closed** — a storage failure resolves to `null`
+ *     (unclaimed ⇒ deny) and is logged server-side with structure;
+ *     the raw error never reaches a wire body. See the failure-mode
+ *     section above for why neither fail-open nor fail-loud is
+ *     acceptable here.
+ */
+export declare function createScopeOwnerResolver(storage: Pick<RegistryStorage, 'getScopeOwner'>, artifactId: string): () => Promise<ScopeOwnerRow | null>;
+/**
+ * Extract the scope segment (leading `@` included) from a canonical
+ * `<@scope>/<name>` artifactId — the key for
+ * {@link RegistryStorage.getScopeOwner}.
+ */
+export declare function artifactScope(artifactId: string): string;
+//# sourceMappingURL=private-read-authz.d.ts.map

package/dist/ops/private-read-authz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-read-authz.d.ts","sourceRoot":"","sources":["../../src/ops/private-read-authz.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAErE;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,EAC5C,aAAa,EAAE,MAAM,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GACjD,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAC/C,UAAU,EAAE,MAAM,GACjB,MAAM,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAiBrC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGxD"}