@ggui-ai/registry-core 0.7.0 → 0.9.0

package/dist/impls/memory-bundle-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-bundle-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-bundle-storage.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,aAAa,CA2Cf"}
+{"version":3,"file":"memory-bundle-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-bundle-storage.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGrE,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,aAAa,CAkDf"}

package/dist/impls/memory-bundle-storage.js

@@ -3,38 +3,41 @@ export function inMemoryBundleStorage(options = {}) {
     const bundles = new Map();
     const signatures = new Map();
     const manifests = new Map();
-    const key = (scope, name, version) => `${scope}/${name}/${version}`;
+    // Visibility segments the key (H1 prefix split) — a blob written
+    // `public` must be invisible to a `private` read of the same triple,
+    // exactly like the prefix-split object keys of the durable impls.
+    const key = (scope, name, version, visibility) => `${visibility}/${scope}/${name}/${version}`;
     return {
-        async putBundle(scope, name, version, bytes) {
-            bundles.set(key(scope, name, version), new Uint8Array(bytes));
-            return this.bundleUrl(scope, name, version);
+        async putBundle(scope, name, version, visibility, bytes) {
+            bundles.set(key(scope, name, version, visibility), new Uint8Array(bytes));
+            return this.bundleUrl(scope, name, version, visibility);
         },
-        async getBundle(scope, name, version) {
-            const bytes = bundles.get(key(scope, name, version));
+        async getBundle(scope, name, version, visibility) {
+            const bytes = bundles.get(key(scope, name, version, visibility));
             return bytes === undefined ? null : new Uint8Array(bytes);
         },
-        async putSignature(scope, name, version, signature) {
-            signatures.set(key(scope, name, version), signature);
-            return this.signatureUrl(scope, name, version);
+        async putSignature(scope, name, version, visibility, signature) {
+            signatures.set(key(scope, name, version, visibility), signature);
+            return this.signatureUrl(scope, name, version, visibility);
         },
-        async getSignature(scope, name, version) {
-            return signatures.get(key(scope, name, version)) ?? null;
+        async getSignature(scope, name, version, visibility) {
+            return signatures.get(key(scope, name, version, visibility)) ?? null;
         },
-        async putManifest(scope, name, version, manifest) {
-            manifests.set(key(scope, name, version), manifest);
-            return this.manifestUrl(scope, name, version);
+        async putManifest(scope, name, version, visibility, manifest) {
+            manifests.set(key(scope, name, version, visibility), manifest);
+            return this.manifestUrl(scope, name, version, visibility);
         },
-        async getManifest(scope, name, version) {
-            return manifests.get(key(scope, name, version)) ?? null;
+        async getManifest(scope, name, version, visibility) {
+            return manifests.get(key(scope, name, version, visibility)) ?? null;
         },
-        bundleUrl(scope, name, version) {
-            return `${bundleHost}/bundles/${scope}/${name}/${version}/bundle.js`;
+        bundleUrl(scope, name, version, visibility) {
+            return `${bundleHost}/bundles/${visibility}/${scope}/${name}/${version}/bundle.js`;
         },
-        signatureUrl(scope, name, version) {
-            return `${bundleHost}/bundles/${scope}/${name}/${version}/bundle.js.sig`;
+        signatureUrl(scope, name, version, visibility) {
+            return `${bundleHost}/bundles/${visibility}/${scope}/${name}/${version}/bundle.js.sig`;
         },
-        manifestUrl(scope, name, version) {
-            return `${bundleHost}/bundles/${scope}/${name}/${version}/manifest.json`;
+        manifestUrl(scope, name, version, visibility) {
+            return `${bundleHost}/bundles/${visibility}/${scope}/${name}/${version}/manifest.json`;
         },
     };
 }

package/dist/impls/memory-registry-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-registry-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-registry-storage.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAK3C,wBAAgB,uBAAuB,IAAI,eAAe,CA2JzD"}
+{"version":3,"file":"memory-registry-storage.d.ts","sourceRoot":"","sources":["../../src/impls/memory-registry-storage.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAM3C,wBAAgB,uBAAuB,IAAI,eAAe,CA2JzD"}

package/dist/impls/memory-registry-storage.js

@@ -1,4 +1,5 @@
 import { AuthorKeyAlreadyExistsError, } from '../interfaces/registry-storage.js';
+import { matchesMcpToolFilters } from '../mcp-tool-filters.js';
 const DEFAULT_LIMIT = 50;
 const MAX_LIMIT = 200;
 export function inMemoryRegistryStorage() {
@@ -173,10 +174,19 @@ function parseCursor(cursor) {
     return n;
 }
 function rowMatchesFilter(row, q) {
+    // #474 — visibility gating lives INSIDE every scanArtifacts impl
+    // (the ruled canonical location); the search op's post-filter stays
+    // as defense-in-depth. Without this, private rows would consume
+    // page slots on self-host impls even though the op filters them out
+    // before they ever reach the wire.
+    if (row.visibility !== 'public')
+        return false;
     if (q.kind !== undefined && row.kind !== q.kind)
         return false;
     if (q.hook !== undefined && row.hook !== q.hook)
         return false;
+    if (!matchesMcpToolFilters(row.mcpTools, q))
+        return false;
     if (q.tag !== undefined) {
         if (row.tags === undefined || !row.tags.includes(q.tag))
             return false;

package/dist/index.d.ts

@@ -10,11 +10,12 @@
 export type { AuthnContext } from './interfaces/authn.js';
 export type { BundleStorage } from './interfaces/bundle-storage.js';
 export { AuthorKeyAlreadyExistsError, type PutAuthorKeyOptions, type RegistryStorage, type ScopeOwnerExpectation, } from './interfaces/registry-storage.js';
-export { ARTIFACTS_METADATA_SK, type ArtifactKind, type ArtifactScanFilter, type ArtifactVersionRow, type ArtifactsMetadataRow, type AuthorKeyListEntry, type AuthorKeyRow, type CompiledBlobRow, DELETE_AUTHOR_KEY_ERROR_CODES, type DeleteAuthorKeyErrorBody, type DeleteAuthorKeyErrorCode, type DeleteAuthorKeyResponseBody, type ErrorBody, LIST_AUTHOR_KEYS_ERROR_CODES, type ListAuthorKeysErrorBody, type ListAuthorKeysErrorCode, type ListAuthorKeysResponseBody, LIST_VERSIONS_ERROR_CODES, type ListVersionsErrorBody, type ListVersionsErrorCode, type ListVersionsResponse, PUBLISH_ERROR_CODES, type PublishErrorBody, type PublishErrorCode, type PublishRequestBody, type PublishResponseBody, READ_ERROR_CODES, type ReadErrorBody, type ReadErrorCode, type ReadPkgResponse, REGISTER_AUTHOR_KEY_ERROR_CODES, type RegisterAuthorKeyErrorBody, type RegisterAuthorKeyErrorCode, type RegisterAuthorKeyRequestBody, type RegisterAuthorKeyResponseBody, SCOPE_VERIFICATIONS, type ScopeOwnerRow, type ScopeVerification, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, type SearchErrorBody, type SearchErrorCode, type SearchResponse, type SearchResultEntry, type SearchSort, type VersionListEntry, type Visibility, } from './types.js';
+export { ARTIFACTS_METADATA_SK, type ArtifactKind, type ArtifactScanFilter, type ArtifactVersionRow, type ArtifactsMetadataRow, type AuthorKeyListEntry, type AuthorKeyRow, type CompiledBlobRow, DELETE_AUTHOR_KEY_ERROR_CODES, type DeleteAuthorKeyErrorBody, type DeleteAuthorKeyErrorCode, type DeleteAuthorKeyResponseBody, type ErrorBody, LIST_AUTHOR_KEYS_ERROR_CODES, type ListAuthorKeysErrorBody, type ListAuthorKeysErrorCode, type ListAuthorKeysResponseBody, LIST_VERSIONS_ERROR_CODES, type ListVersionsErrorBody, type ListVersionsErrorCode, type ListVersionsResponse, PUBLISH_ERROR_CODES, type PublishErrorBody, type PublishErrorCode, type PublishRequestBody, type PublishResponseBody, READ_ERROR_CODES, type ReadErrorBody, type ReadErrorCode, type ReadPkgResponse, REGISTER_AUTHOR_KEY_ERROR_CODES, type RegisterAuthorKeyErrorBody, type RegisterAuthorKeyErrorCode, type RegisterAuthorKeyRequestBody, type RegisterAuthorKeyResponseBody, SAN_ALLOWLIST_INVALID, type SanAllowlistInvalid, SCOPE_VERIFICATIONS, type ScopeOwnerRow, type ScopeVerification, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, type SearchErrorBody, type SearchErrorCode, type SearchResponse, type SearchResultEntry, type SearchSort, type VersionListEntry, type Visibility, } from './types.js';
 export { compileBlueprint, type CompileBlueprintErr, type CompileBlueprintOk, type CompileBlueprintResult, } from './ops/compile.js';
 export { checkConformance, MAX_BLUEPRINT_SOURCE_BYTES, type BlueprintProbeRunner, type ConformanceError, type ConformanceErrorCode, type ConformanceFailureCode, type ConformanceRequestPayload, type ConformanceResponseBody, } from './ops/conformance.js';
-export { publishArtifact, MAX_BUNDLE_BYTES, RESERVED_SCOPES, type PublishArtifactDeps, type PublishArtifactInput, type PublishArtifactResult, } from './ops/publish.js';
+export { publishArtifact, MAX_BUNDLE_BYTES, RESERVED_SCOPES, type PublishArtifactDeps, type PublishArtifactInput, type PublishArtifactResult, type VerifiedEmailResolver, } from './ops/publish.js';
 export { readArtifact, type ReadArtifactDeps, type ReadArtifactInput, type ReadArtifactResult, } from './ops/read.js';
+export { artifactScope, canReadPrivateArtifact, createScopeOwnerResolver, } from './ops/private-read-authz.js';
 export { listArtifactVersions, type ListArtifactVersionsDeps, type ListArtifactVersionsInput, type ListArtifactVersionsResult, } from './ops/list-versions.js';
 export { searchArtifacts, type SearchArtifactsDeps, type SearchArtifactsInput, type SearchArtifactsResult, } from './ops/search.js';
 export { registerAuthorKey, type RegisterAuthorKeyDeps, type RegisterAuthorKeyInput, type RegisterAuthorKeyResult, } from './ops/register-author-key.js';
@@ -22,6 +23,7 @@ export { listAuthorKeys, type ListAuthorKeysDeps, type ListAuthorKeysResult, } f
 export { deleteAuthorKey, type DeleteAuthorKeyDeps, type DeleteAuthorKeyInput, type DeleteAuthorKeyResult, } from './ops/delete-author-key.js';
 export { inMemoryRegistryStorage } from './impls/memory-registry-storage.js';
 export { inMemoryBundleStorage, type InMemoryBundleStorageOptions, } from './impls/memory-bundle-storage.js';
+export { matchesMcpToolFilters } from './mcp-tool-filters.js';
 export { installCommand, type InstallCommandOptions, } from './install-command.js';
 export { compareSemver } from './utils/semver.js';
 export { base64Encode, safeBase64Decode, sha384Base64 } from './utils/base64.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,+BAA+B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjF,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -9,12 +9,13 @@
  */
 export { AuthorKeyAlreadyExistsError, } from './interfaces/registry-storage.js';
 // Types — rows + wire shapes
-export { ARTIFACTS_METADATA_SK, DELETE_AUTHOR_KEY_ERROR_CODES, LIST_AUTHOR_KEYS_ERROR_CODES, LIST_VERSIONS_ERROR_CODES, PUBLISH_ERROR_CODES, READ_ERROR_CODES, REGISTER_AUTHOR_KEY_ERROR_CODES, SCOPE_VERIFICATIONS, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, } from './types.js';
+export { ARTIFACTS_METADATA_SK, DELETE_AUTHOR_KEY_ERROR_CODES, LIST_AUTHOR_KEYS_ERROR_CODES, LIST_VERSIONS_ERROR_CODES, PUBLISH_ERROR_CODES, READ_ERROR_CODES, REGISTER_AUTHOR_KEY_ERROR_CODES, SAN_ALLOWLIST_INVALID, SCOPE_VERIFICATIONS, SEARCH_ERROR_CODES, SEARCH_SORT_OPTIONS, unauthorizedErrorBody, } from './types.js';
 // Operations
 export { compileBlueprint, } from './ops/compile.js';
 export { checkConformance, MAX_BLUEPRINT_SOURCE_BYTES, } from './ops/conformance.js';
 export { publishArtifact, MAX_BUNDLE_BYTES, RESERVED_SCOPES, } from './ops/publish.js';
 export { readArtifact, } from './ops/read.js';
+export { artifactScope, canReadPrivateArtifact, createScopeOwnerResolver, } from './ops/private-read-authz.js';
 export { listArtifactVersions, } from './ops/list-versions.js';
 export { searchArtifacts, } from './ops/search.js';
 export { registerAuthorKey, } from './ops/register-author-key.js';
@@ -23,6 +24,8 @@ export { deleteAuthorKey, } from './ops/delete-author-key.js';
 // In-memory impls
 export { inMemoryRegistryStorage } from './impls/memory-registry-storage.js';
 export { inMemoryBundleStorage, } from './impls/memory-bundle-storage.js';
+// Shared scan-filter semantics
+export { matchesMcpToolFilters } from './mcp-tool-filters.js';
 // Utils
 export { installCommand, } from './install-command.js';
 export { compareSemver } from './utils/semver.js';

package/dist/interfaces/bundle-storage.d.ts

@@ -2,8 +2,8 @@
  * `BundleStorage` — bundle + signature + manifest blob storage. A
  * hosted implementation may serve blobs from object storage behind a
  * CDN; the open-source server backs it with the filesystem under
- * `<root>/bundles/<scope>/<name>/<version>/`. A memory impl is
- * provided for tests.
+ * `<root>/bundles/<visibility>/<scope>/<name>/<version>/`. A memory
+ * impl is provided for tests.
  *
  * Each `put*` method returns the fully-qualified URL the consumer
  * (iframe runtime, install CLI) can fetch. The URL prefix is
@@ -11,17 +11,33 @@
  * CDN-fronted implementation, or `http://localhost:9001` (or
  * whatever the server is bound to) for the open-source server.
  *
- * Bundles are immutable post-publish. Responses MUST emit
- * `Cache-Control: public, max-age=31536000, immutable` — SRI integrity
- * depends on it. The OSS server's bundle route sets this header
- * explicitly; a CDN-fronted implementation sets it via its cache
- * policy.
+ * ## Visibility-split key layout (load-bearing)
+ *
+ * Every blob lives under a visibility-segmented key:
+ *
+ *   bundles/public/<scope>/<name>/<version>/{bundle.js,bundle.js.sig,manifest.json}
+ *   bundles/private/<scope>/<name>/<version>/{...}
+ *
+ * Placement IS the access-control boundary: the `bundles/public/`
+ * prefix may be served anonymously (CDN, static route); the
+ * `bundles/private/` prefix MUST only be reachable through an
+ * authenticated route that authorizes the caller against the
+ * artifact's publisher or scope owner. An impl that flattens the two
+ * prefixes back together silently republishes every private artifact.
+ *
+ * Bundles are immutable post-publish. Public-prefix responses MUST
+ * emit `Cache-Control: public, max-age=31536000, immutable` — SRI
+ * integrity depends on it. Private-prefix responses stay immutable but
+ * MUST NOT be shared-cacheable (`Cache-Control: private, …`). The OSS
+ * server's bundle routes set these headers explicitly; a CDN-fronted
+ * implementation sets the public policy on its cache behavior.
  *
  * ## Protocol & Contract Bar
  *
  * **Parties:**
  * - Producer: {@link publishArtifact} writes bundle (gadgets),
- *   signature (gadgets), and manifest (always) on every publish.
+ *   signature (gadgets), and manifest (always) on every publish, at
+ *   the key the manifest's `visibility` selects.
  * - Consumer: iframe-runtime (bundleUrl), install CLI (signatureUrl,
  *   manifestUrl), audit tooling (manifestUrl on yanked versions).
  *
@@ -31,49 +47,57 @@
  *   per-version row immutability invariant on {@link RegistryStorage}
  *   prevents true re-publishes; the bundle-storage layer needs no
  *   conflict semantics).
+ * - Key composition MUST segment on `visibility` — a blob written
+ *   `public` is invisible to a `private` read of the same triple, and
+ *   vice versa.
  * - URL composition methods (`bundleUrl`, `signatureUrl`,
- *   `manifestUrl`) MUST be pure — no I/O, no async. Consumers cache
- *   URLs liberally.
+ *   `manifestUrl`) MUST be pure — no I/O, no async — and MUST embed
+ *   the same visibility segment the corresponding `put*` used, so the
+ *   persisted row URLs point at the blob's real location. Consumers
+ *   cache URLs liberally.
  *
  * **Failure mode:**
  * - Transport-level failures throw; the publish op wraps and returns
  *   500.
- * - Missing-blob reads return `null`; never throw.
+ * - Missing-blob reads return `null`; never throw. A visibility
+ *   mismatch reads as a miss.
  *
  * **Observable violation:**
  * - Contract test {@link bundleStorageContract} covers: bundle
  *   round-trip preserves bytes; signature round-trip preserves the
  *   structured object; manifest round-trip preserves the full
- *   discriminated-union shape; URL methods compose without side effects;
- *   missing reads return null.
+ *   discriminated-union shape; URL methods compose without side effects
+ *   and embed the visibility segment; missing reads return null;
+ *   cross-visibility reads return null.
  */
 import type { ArtifactManifest } from '@ggui-ai/artifact-manifest';
 import type { GadgetSignature } from '@ggui-ai/gadget-signing';
+import type { Visibility } from '../types.js';
 export interface BundleStorage {
-    /** Write gadget bundle bytes. Returns the public URL. */
-    putBundle(scope: string, name: string, version: string, bytes: Uint8Array): Promise<string>;
-    /** Read gadget bundle bytes. `null` on miss. */
-    getBundle(scope: string, name: string, version: string): Promise<Uint8Array | null>;
+    /** Write gadget bundle bytes. Returns the fetch URL. */
+    putBundle(scope: string, name: string, version: string, visibility: Visibility, bytes: Uint8Array): Promise<string>;
+    /** Read gadget bundle bytes. `null` on miss (including visibility mismatch). */
+    getBundle(scope: string, name: string, version: string, visibility: Visibility): Promise<Uint8Array | null>;
     /**
-     * Write the signature envelope. Returns the public URL.
+     * Write the signature envelope. Returns the fetch URL.
      *
      * The envelope is a {@link GadgetSignature} — a discriminated union
      * over `algorithm` (`ed25519` for private gadgets, `sigstore-cosign`
      * for public). Impls serialize via `JSON.stringify(signature)` and
      * store the resulting bytes verbatim.
      */
-    putSignature(scope: string, name: string, version: string, signature: GadgetSignature): Promise<string>;
-    /** Read the signature envelope. `null` on miss. */
-    getSignature(scope: string, name: string, version: string): Promise<GadgetSignature | null>;
-    /** Write the manifest verbatim. Returns the public URL. */
-    putManifest(scope: string, name: string, version: string, manifest: ArtifactManifest): Promise<string>;
-    /** Read the manifest. `null` on miss. */
-    getManifest(scope: string, name: string, version: string): Promise<ArtifactManifest | null>;
-    /** Compose the public bundle URL. No I/O. */
-    bundleUrl(scope: string, name: string, version: string): string;
-    /** Compose the public signature URL. No I/O. */
-    signatureUrl(scope: string, name: string, version: string): string;
-    /** Compose the public manifest URL. No I/O. */
-    manifestUrl(scope: string, name: string, version: string): string;
+    putSignature(scope: string, name: string, version: string, visibility: Visibility, signature: GadgetSignature): Promise<string>;
+    /** Read the signature envelope. `null` on miss (including visibility mismatch). */
+    getSignature(scope: string, name: string, version: string, visibility: Visibility): Promise<GadgetSignature | null>;
+    /** Write the manifest verbatim. Returns the fetch URL. */
+    putManifest(scope: string, name: string, version: string, visibility: Visibility, manifest: ArtifactManifest): Promise<string>;
+    /** Read the manifest. `null` on miss (including visibility mismatch). */
+    getManifest(scope: string, name: string, version: string, visibility: Visibility): Promise<ArtifactManifest | null>;
+    /** Compose the bundle URL (embeds the visibility segment). No I/O. */
+    bundleUrl(scope: string, name: string, version: string, visibility: Visibility): string;
+    /** Compose the signature URL (embeds the visibility segment). No I/O. */
+    signatureUrl(scope: string, name: string, version: string, visibility: Visibility): string;
+    /** Compose the manifest URL (embeds the visibility segment). No I/O. */
+    manifestUrl(scope: string, name: string, version: string, visibility: Visibility): string;
 }
 //# sourceMappingURL=bundle-storage.d.ts.map

package/dist/interfaces/bundle-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/bundle-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,gDAAgD;IAChD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAEpF;;;;;;;OAOG;IACH,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,mDAAmD;IACnD,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEnC,2DAA2D;IAC3D,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,yCAAyC;IACzC,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEpC,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAChE,gDAAgD;IAChD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACnE,+CAA+C;IAC/C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnE"}
+{"version":3,"file":"bundle-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/bundle-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,SAAS,CACP,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,gFAAgF;IAChF,SAAS,CACP,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE9B;;;;;;;OAOG;IACH,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,mFAAmF;IACnF,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEnC,0DAA0D;IAC1D,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,yEAAyE;IACzE,WAAW,CACT,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEpC,sEAAsE;IACtE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IACxF,yEAAyE;IACzE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IAC3F,wEAAwE;IACxE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;CAC3F"}

package/dist/interfaces/registry-storage.d.ts

@@ -53,6 +53,21 @@
  *   rows MUST come back ordered by `publishedAt` descending (newest
  *   first), globally correct across the full cursor chain. Without an
  *   `order`, consumers MUST treat ordering as non-deterministic.
+ * - {@link scanArtifacts} MUST apply the `tool` / `server` filter
+ *   dimensions with the shared semantics of `matchesMcpToolFilters`:
+ *   `tool` matches any binding entry with that tool name; `server`
+ *   matches entries declaring that server (bare entries never match);
+ *   together they require one entry with exactly that (server, tool)
+ *   pair. Case-sensitive exact, AND-composed with every other
+ *   dimension.
+ * - {@link scanArtifacts} MUST exclude non-public rows
+ *   (`visibility !== 'public'`) — visibility gating lives INSIDE every
+ *   impl, not only at the caller layer (#259 delta-2 final-review
+ *   ruling, #474). {@link searchArtifacts}'s post-fetch visibility
+ *   filter is defense-in-depth ONLY; it must never be the sole gate,
+ *   because a private row that reaches the storage-layer page would
+ *   consume a `limit` slot before the op ever gets to discard it —
+ *   an observable underfill on self-host impls.
  *
  * **Failure mode:**
  * - Transport-level failures (store throttling, disk full) throw.
@@ -66,8 +81,11 @@
  *   `putArtifactVersionIfAbsent` rejects on collision, missing returns
  *   null, `listAuthorKeys` returns only keys for the queried subject,
  *   `deleteAuthorKey` true/false idempotency + per-subject isolation,
- *   and `order: 'recent'` newest-first ordering (single page + across
- *   the cursor chain).
+ *   `order: 'recent'` newest-first ordering (single page + across the
+ *   cursor chain), the `tool` / `server` filter dimensions (tool-only,
+ *   server-only with bare-entry exclusion, and the exact-pair
+ *   cross-product case), and non-public rows never appearing in
+ *   `scanArtifacts` results OR consuming a `limit` page slot.
  */
 import type { ArtifactScanFilter, ArtifactVersionRow, ArtifactsMetadataRow, AuthorKeyRow, CompiledBlobRow, ScopeOwnerRow } from '../types.js';
 /**
@@ -122,6 +140,10 @@ export interface RegistryStorage {
      * When `filter.order` is `'recent'`, rows MUST be returned newest
      * first by `publishedAt`, globally correct across the full cursor
      * chain — see the Obligations section above.
+     *
+     * `filter.tool` / `filter.server` follow the shared MCP-binding
+     * filter semantics (`matchesMcpToolFilters`) — see the Obligations
+     * section above.
      */
     scanArtifacts(filter: ArtifactScanFilter): Promise<{
         readonly rows: readonly ArtifactsMetadataRow[];

package/dist/interfaces/registry-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/registry-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,aAAa,EACd,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACtD,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC;AAE9B,MAAM,WAAW,eAAe;IAE9B,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;QACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,oBAAoB,EAAE,CAAC;QAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAGH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,0BAA0B,CACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxE;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,oBAAoB,CAClB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAC1C,CAAC;IAGF;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC3E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CACd,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAG9C,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,YAAY,CACV,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IAClE;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE"}
+{"version":3,"file":"registry-storage.d.ts","sourceRoot":"","sources":["../../src/interfaces/registry-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,aAAa,EACd,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACtD,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC;AAE9B,MAAM,WAAW,eAAe;IAE9B,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;QACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,oBAAoB,EAAE,CAAC;QAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAGH,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,0BAA0B,CACxB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IACnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGxE;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,oBAAoB,CAClB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CACN;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAC1C,CAAC;IAGF;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC3E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CACd,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAG9C,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC3E;;;;;;OAMG;IACH,YAAY,CACV,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IAClE;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE"}

package/dist/mcp-tool-filters.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared MCP-tool search-filter predicate — the reference semantics
+ * every {@link RegistryStorage.scanArtifacts} implementation must
+ * reproduce for the `tool` / `server` filter dimensions:
+ *
+ *   - `tool` only    → any binding entry with that tool name (with or
+ *                      without a `server`).
+ *   - `server` only  → any binding entry declaring that server; bare
+ *                      (server-less) entries never match.
+ *   - both           → a single entry with exactly that (server, tool)
+ *                      pair.
+ *   - neither        → always `true` (the filter is inactive).
+ *
+ * Matching is case-sensitive exact on both dimensions — MCP tool names
+ * are case-sensitive. AND-composes with every other scan-filter
+ * dimension; artifacts without bindings never match an active filter.
+ */
+import type { McpToolBinding } from '@ggui-ai/artifact-manifest';
+export declare function matchesMcpToolFilters(bindings: ReadonlyArray<McpToolBinding> | undefined, filters: {
+    tool?: string;
+    server?: string;
+}): boolean;
+//# sourceMappingURL=mcp-tool-filters.d.ts.map

package/dist/mcp-tool-filters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-filters.d.ts","sourceRoot":"","sources":["../src/mcp-tool-filters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,SAAS,EACnD,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAST"}

package/dist/mcp-tool-filters.js

@@ -0,0 +1,14 @@
+export function matchesMcpToolFilters(bindings, filters) {
+    const { tool, server } = filters;
+    if (tool === undefined && server === undefined)
+        return true;
+    if (bindings === undefined || bindings.length === 0)
+        return false;
+    return bindings.some((binding) => {
+        if (tool !== undefined && binding.tool !== tool)
+            return false;
+        if (server !== undefined && binding.server !== server)
+            return false;
+        return true;
+    });
+}

package/dist/ops/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/ops/compile.ts"],"names":[],"mappings":"AAoDA,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1E,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,CA4CvE"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/ops/compile.ts"],"names":[],"mappings":"AAwEA,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1E,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,CA6CvE"}

package/dist/ops/compile.js

@@ -46,9 +46,26 @@
  * load-bearing one (its OUTPUT is what's stored), but the two are
  * deliberately separate so a `POST /conformance/check` dry-run
  * remains cheap (no bundle resolution).
+ *
+ * **Lazy dependency load.** `esbuild` ships its own platform-specific
+ * native binary; loading it costs real init time and can fail outright
+ * on a host with no matching binary for the running platform. Callers
+ * that never reach `compileBlueprint` (most registry operations don't
+ * touch blueprint compilation) shouldn't pay that cost just for
+ * importing this module. `esbuild` resolves as an ordinary CommonJS
+ * package, so a `require()` obtained via `createRequire` defers the
+ * load to the first actual call, memoized at module scope so a
+ * long-lived process only pays it once — with NO change to
+ * {@link compileBlueprint}'s synchronous signature.
  */
-import * as esbuild from 'esbuild';
+import { createRequire } from 'node:module';
 import { createHash } from 'node:crypto';
+const nodeRequire = createRequire(import.meta.url);
+let esbuildModule;
+/** Lazy, memoized `esbuild` accessor — see the file-level doc above. */
+function loadEsbuild() {
+    return (esbuildModule ??= nodeRequire('esbuild'));
+}
 /**
  * Compile a blueprint's TSX `source` into canonical compiled JS bytes.
  *
@@ -63,6 +80,7 @@ import { createHash } from 'node:crypto';
  */
 export function compileBlueprint(source) {
     try {
+        const esbuild = loadEsbuild();
         // esbuild.buildSync would require a virtual-fs layer to handle
         // imports; we use transformSync which compiles a single text input
         // and emits a single text output. Tree-shaking is OFF and externals

package/dist/ops/conformance.d.ts

@@ -65,7 +65,7 @@
  * registry-core to keep this layer free of DOM-emulation deps.
  */
 import { type ArtifactManifest } from '@ggui-ai/artifact-manifest';
-import { type StaticExport, type StaticImport } from 'oxc-parser';
+import type { StaticExport, StaticImport } from 'oxc-parser';
 /**
  * Body shape of the conformance request. `bundle` is the UTF-8 text of
  * the compiled gadget entry; required for `kind: "gadget"` manifests,
@@ -116,16 +116,19 @@ export interface ConformanceResponseBody {
  */
 export declare const MAX_BLUEPRINT_SOURCE_BYTES: number;
 /**
- * Run the conformance check synchronously. Pure function: no
- * network, no env lookups. Returns the locked response body shape.
- * Every registry transport and the publish op call this.
+ * Run the conformance check. Pure beyond the (memoized, in-process)
+ * `oxc-parser` load: no network, no env lookups. Resolves to the
+ * locked response body shape. Every registry transport and the
+ * publish op call this — all are already async, so awaiting here adds
+ * no restructuring on the caller side; see `loadOxcParser`'s doc for
+ * why this can't stay synchronous.
  *
  * Static gates only — the optional runtime probe lives behind a
  * {@link BlueprintProbeRunner} seam so registry-core stays free of
  * DOM-emulation deps (happy-dom + react-dom/server land in the caller
  * that wants the probe).
  */
-export declare function checkConformance(payload: ConformanceRequestPayload): ConformanceResponseBody;
+export declare function checkConformance(payload: ConformanceRequestPayload): Promise<ConformanceResponseBody>;
 /**
  * Runtime-probe seam. Implemented by callers that opt into the
  * sandboxed render check. registry-core does not provide a default

package/dist/ops/conformance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../src/ops/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAGpB;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,wBAAwB,GACxB,4BAA4B,GAC5B,yBAAyB,GACzB,6BAA6B,GAC7B,kCAAkC,GAClC,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAkBD;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,yBAAyB,GACjC,uBAAuB,CAgBzB;AAmbD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,GACzD,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../src/ops/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAEV,YAAY,EACZ,YAAY,EACb,MAAM,YAAY,CAAC;AA4BpB;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,wBAAwB,GACxB,4BAA4B,GAC5B,yBAAyB,GACzB,6BAA6B,GAC7B,kCAAkC,GAClC,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAkBD;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QAAkB,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,uBAAuB,CAAC,CAgBlC;AAqbD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,GACzD,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/ops/conformance.js

@@ -65,7 +65,30 @@
  * registry-core to keep this layer free of DOM-emulation deps.
  */
 import { safeParseArtifactManifest, } from '@ggui-ai/artifact-manifest';
-import { parseSync, } from 'oxc-parser';
+import { memoizedRetryingImport } from '../utils/lazy-import.js';
+/**
+ * Lazy, memoized `oxc-parser` accessor. `oxc-parser` ships its own
+ * platform-specific native binding; loading it costs real init time
+ * and can fail outright on a host with no matching binding for the
+ * running platform. Callers that never reach the parse gates (most
+ * registry operations don't touch bundle/source conformance) shouldn't
+ * pay that cost just for importing this module — or the barrel that
+ * re-exports it.
+ *
+ * `oxc-parser` ships ESM-only (no CommonJS entry point), so a dynamic
+ * `import()` is the only way to defer the load — unlike `esbuild` in
+ * `compile.ts`, there's no synchronous `require()` path available.
+ * That's what pushes {@link checkConformance} (and everything that
+ * calls it) from a plain synchronous function to one returning a
+ * `Promise`. {@link memoizedRetryingImport} memoizes the promise at
+ * module scope — concurrent first callers share one in-flight load,
+ * and a long-lived process pays the import cost at most once per
+ * successful load — while clearing the cache on rejection, so a
+ * failed load doesn't poison every later call for the rest of the
+ * process (see that helper's doc for why a bare `??=` isn't safe
+ * here).
+ */
+const loadOxcParser = memoizedRetryingImport(() => import('oxc-parser'));
 /**
  * Always-permitted import sources for gadget bundles. Mirrors the
  * runtime CSP the iframe enforces — these are the only modules the
@@ -91,16 +114,19 @@ const ALWAYS_ALLOWED_IMPORTS = new Set([
  */
 export const MAX_BLUEPRINT_SOURCE_BYTES = 5 * 1024 * 1024;
 /**
- * Run the conformance check synchronously. Pure function: no
- * network, no env lookups. Returns the locked response body shape.
- * Every registry transport and the publish op call this.
+ * Run the conformance check. Pure beyond the (memoized, in-process)
+ * `oxc-parser` load: no network, no env lookups. Resolves to the
+ * locked response body shape. Every registry transport and the
+ * publish op call this — all are already async, so awaiting here adds
+ * no restructuring on the caller side; see `loadOxcParser`'s doc for
+ * why this can't stay synchronous.
  *
  * Static gates only — the optional runtime probe lives behind a
  * {@link BlueprintProbeRunner} seam so registry-core stays free of
  * DOM-emulation deps (happy-dom + react-dom/server land in the caller
  * that wants the probe).
  */
-export function checkConformance(payload) {
+export async function checkConformance(payload) {
     // ── Gate 1: manifest schema ────────────────────────────────────────
     const manifestResult = safeParseArtifactManifest(payload.manifest);
     if (!manifestResult.success) {
@@ -120,7 +146,7 @@ export function checkConformance(payload) {
  * Extracted from {@link checkConformance} so the blueprint branch can
  * stand on its own without nesting.
  */
-function checkGadgetConformance(manifest, bundle) {
+async function checkGadgetConformance(manifest, bundle) {
     // ── Gate 2: bundle is parseable ESM ────────────────────────────────
     if (typeof bundle !== 'string' || bundle.length === 0) {
         return {
@@ -133,6 +159,7 @@ function checkGadgetConformance(manifest, bundle) {
             ],
         };
     }
+    const { parseSync } = await loadOxcParser();
     const parsed = parseSync('bundle.js', bundle, {
         lang: 'js',
         sourceType: 'module',
@@ -204,7 +231,7 @@ function checkGadgetConformance(manifest, bundle) {
  * shape. Static-only; the runtime probe lives behind the optional
  * {@link BlueprintProbeRunner} seam.
  */
-function checkBlueprintConformance(manifest) {
+async function checkBlueprintConformance(manifest) {
     // ── Gate 5: source size ──────────────────────────────────────────
     const sourceBytes = utf8ByteLength(manifest.source);
     if (sourceBytes > MAX_BLUEPRINT_SOURCE_BYTES) {
@@ -225,6 +252,7 @@ function checkBlueprintConformance(manifest) {
     // (not a compiled output) is deliberate — author intent (including
     // unused imports that signal mis-configured deps) is what the
     // allow-list gates, not whatever a bundler would optimize away.
+    const { parseSync } = await loadOxcParser();
     const parsed = parseSync('blueprint.tsx', manifest.source, {
         lang: 'tsx',
         sourceType: 'module',