@ggui-ai/registry-core 0.7.0 → 0.9.0

package/dist/testing/registry-storage-contract.js

@@ -17,7 +17,7 @@
  */
 import { describe, expect, it } from 'vitest';
 import { AuthorKeyAlreadyExistsError, } from '../interfaces/registry-storage.js';
-import { ARTIFACTS_METADATA_SK } from '../types.js';
+import { ARTIFACTS_METADATA_SK, SAN_ALLOWLIST_INVALID } from '../types.js';
 function makeMetadata(overrides = {}) {
     return {
         artifactId: '@test/foo',
@@ -161,6 +161,32 @@ export function registryStorageContract(makeStorage) {
                 const ids = page.rows.map((r) => r.artifactId).sort();
                 expect(ids).toEqual(['@a/1', '@b/2']);
             });
+            // #474 — visibility gating is ruled to live INSIDE every
+            // scanArtifacts impl (the search op's post-filter stays as
+            // defense-in-depth, but must never be the ONLY gate — otherwise
+            // private rows consume page slots on self-host impls, an
+            // observable underfill).
+            it('excludes private rows from scanArtifacts results (#474)', async () => {
+                const storage = makeStorage();
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/secret', visibility: 'private' }));
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/public', visibility: 'public' }));
+                const page = await storage.scanArtifacts({});
+                expect(page.rows.map((r) => r.artifactId)).toEqual(['@a/public']);
+            });
+            it('private rows never consume a page slot — a `limit` is satisfied entirely from public rows (#474)', async () => {
+                const storage = makeStorage();
+                // Private rows interleaved with public ones. If private rows
+                // consumed limit slots (visibility filtered only at the op
+                // layer, after pagination), a limit=2 request could return
+                // fewer than 2 public rows.
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/priv1', visibility: 'private' }));
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/pub1', visibility: 'public' }));
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/priv2', visibility: 'private' }));
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/pub2', visibility: 'public' }));
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/priv3', visibility: 'private' }));
+                const page = await storage.scanArtifacts({ limit: 2 });
+                expect(page.rows.map((r) => r.artifactId).sort()).toEqual(['@a/pub1', '@a/pub2']);
+            });
             it('filters by kind', async () => {
                 const storage = makeStorage();
                 await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/g', kind: 'gadget' }));
@@ -265,6 +291,68 @@ export function registryStorageContract(makeStorage) {
                 const byTag = await storage.scanArtifacts({ q: 'geo' });
                 expect(byTag.rows.map((r) => r.artifactId)).toEqual(['@a/leaflet']);
             });
+            // #259 delta-2 — MCP tool-binding filters share `matchesMcpToolFilters`
+            // semantics with the search op; every impl must honor them identically
+            // (the byMcpTool GSI path in the DDB adapter is the load-bearing case).
+            it('filters by tool (matches any entry with that tool name, with or without a server)', async () => {
+                const storage = makeStorage();
+                await storage.putArtifactMetadata(makeMetadata({
+                    artifactId: '@a/stripe-ui',
+                    mcpTools: [{ server: 'stripe-mcp', tool: 'create_payment' }],
+                    mcpToolsSource: 'declared',
+                }));
+                await storage.putArtifactMetadata(makeMetadata({
+                    artifactId: '@a/bare-ui',
+                    mcpTools: [{ tool: 'refund_payment' }],
+                    mcpToolsSource: 'derived',
+                }));
+                await storage.putArtifactMetadata(makeMetadata({ artifactId: '@a/unbound', mcpTools: undefined }));
+                const byServerBound = await storage.scanArtifacts({ tool: 'create_payment' });
+                expect(byServerBound.rows.map((r) => r.artifactId)).toEqual(['@a/stripe-ui']);
+                const byBare = await storage.scanArtifacts({ tool: 'refund_payment' });
+                expect(byBare.rows.map((r) => r.artifactId)).toEqual(['@a/bare-ui']);
+                const byMiss = await storage.scanArtifacts({ tool: 'unknown_tool' });
+                expect(byMiss.rows).toEqual([]);
+            });
+            it('filters by server; bare-tool entries never match', async () => {
+                const storage = makeStorage();
+                await storage.putArtifactMetadata(makeMetadata({
+                    artifactId: '@a/bound',
+                    mcpTools: [{ server: 'stripe-mcp', tool: 'create_payment' }],
+                    mcpToolsSource: 'declared',
+                }));
+                await storage.putArtifactMetadata(makeMetadata({
+                    artifactId: '@a/bare',
+                    mcpTools: [{ tool: 'create_payment' }],
+                    mcpToolsSource: 'derived',
+                }));
+                const page = await storage.scanArtifacts({ server: 'stripe-mcp' });
+                expect(page.rows.map((r) => r.artifactId)).toEqual(['@a/bound']);
+            });
+            it('tool + server composes into the exact-pair filter — cross-product is not enough', async () => {
+                const storage = makeStorage();
+                // A single artifact declaring TWO bindings — `stripe-mcp` and
+                // `refund_payment` each independently exist on this row, but
+                // never paired on the same binding entry.
+                await storage.putArtifactMetadata(makeMetadata({
+                    artifactId: '@a/multi-bound',
+                    mcpTools: [
+                        { server: 'stripe-mcp', tool: 'create_payment' },
+                        { server: 'other-mcp', tool: 'refund_payment' },
+                    ],
+                    mcpToolsSource: 'declared',
+                }));
+                const exactPair = await storage.scanArtifacts({
+                    server: 'stripe-mcp',
+                    tool: 'create_payment',
+                });
+                expect(exactPair.rows.map((r) => r.artifactId)).toEqual(['@a/multi-bound']);
+                const crossProduct = await storage.scanArtifacts({
+                    server: 'stripe-mcp',
+                    tool: 'refund_payment',
+                });
+                expect(crossProduct.rows).toEqual([]);
+            });
         });
         describe('plugin versions', () => {
             it('returns null for missing version', async () => {
@@ -582,6 +670,65 @@ export function registryStorageContract(makeStorage) {
                 await storage.claimScope(makeScopeOwner({ ownerSubject: 'winner' }));
                 expect((await storage.getScopeOwner('@test'))?.ownerSubject).toBe('winner');
             });
+            // F4 — `sanAllowlist` is the per-scope publisher-identity
+            // allowlist the publish gate enforces on sigstore-signed
+            // publishes. It's an OPTIONAL array column: a row without it
+            // falls back to the deployment's default identity rule, so a
+            // storage impl that silently drops (or fabricates) the field
+            // would flip a scope's identity policy without any write.
+            it('claimScope round-trips a sanAllowlist (F4 identity binding)', async () => {
+                const storage = makeStorage();
+                const row = makeScopeOwner({
+                    sanAllowlist: [
+                        'ci@test.example',
+                        'https://ci.example.com/workflows/publish.yml@refs/heads/main',
+                    ],
+                });
+                await storage.claimScope(row);
+                expect(await storage.getScopeOwner(row.scope)).toEqual(row);
+            });
+            it('updateScopeOwner sets a sanAllowlist on an existing row (operator path)', async () => {
+                const storage = makeStorage();
+                await storage.claimScope(makeScopeOwner());
+                const withAllowlist = makeScopeOwner({ sanAllowlist: ['ops@test.example'] });
+                const result = await storage.updateScopeOwner(withAllowlist, {
+                    ownerSubject: 'user-1',
+                    verification: 'unverified',
+                });
+                expect(result).toEqual({ ok: true });
+                expect(await storage.getScopeOwner('@test')).toEqual(withAllowlist);
+            });
+            it('the SAN_ALLOWLIST_INVALID marker round-trips as invalid — corruption never launders into a valid policy', async () => {
+                // Fail-closed obligation: an adapter that reads malformed
+                // allowlist data projects SAN_ALLOWLIST_INVALID (see
+                // ScopeOwnerRow.sanAllowlist). Writing the marker itself back
+                // (e.g. a verification flip preserving a corrupt column) MUST
+                // read back as invalid in every impl — the marker is a bare
+                // string, itself a malformed column value, so the round-trip
+                // cannot turn corruption into "no allowlist" or a real list.
+                const storage = makeStorage();
+                const row = makeScopeOwner({ sanAllowlist: SAN_ALLOWLIST_INVALID });
+                await storage.claimScope(row);
+                expect((await storage.getScopeOwner('@test'))?.sanAllowlist).toBe(SAN_ALLOWLIST_INVALID);
+            });
+            it('updateScopeOwner clears a sanAllowlist — the field is ABSENT after, not empty', async () => {
+                // Absent vs empty is load-bearing: the publish gate treats a
+                // missing allowlist as "no per-scope rule" (default identity
+                // rule applies). A cleared row that came back `[]` instead of
+                // absent would be indistinguishable in JS truthiness tests but
+                // MUST round-trip as absent so every impl agrees on the shape.
+                const storage = makeStorage();
+                await storage.claimScope(makeScopeOwner({ sanAllowlist: ['ops@test.example'] }));
+                const cleared = makeScopeOwner();
+                const result = await storage.updateScopeOwner(cleared, {
+                    ownerSubject: 'user-1',
+                    verification: 'unverified',
+                });
+                expect(result).toEqual({ ok: true });
+                const fetched = await storage.getScopeOwner('@test');
+                expect(fetched).toEqual(cleared);
+                expect(fetched?.sanAllowlist).toBeUndefined();
+            });
         });
         describe('author keys', () => {
             it('returns null on miss', async () => {

package/dist/types.d.ts

@@ -14,7 +14,7 @@
  * 'blueprint'` as the discriminator. The field name `artifactId`
  * matches what the field actually contains.
  */
-import type { ArtifactManifest } from '@ggui-ai/artifact-manifest';
+import type { ArtifactManifest, McpToolBinding, McpToolBindingSource } from '@ggui-ai/artifact-manifest';
 import type { GadgetSignature } from '@ggui-ai/gadget-signing';
 import type { ConformanceFailureCode } from './ops/conformance.js';
 /**
@@ -54,6 +54,15 @@ export interface ArtifactsMetadataRow {
     readonly tags?: readonly string[];
     readonly visibility: Visibility;
     readonly hook?: string;
+    /**
+     * Denormalized MCP tool bindings of the latest version — stamped at
+     * publish from the manifest's declared `mcpTools`, or derived from a
+     * blueprint contract's tool names, so registry search can filter by
+     * tool without reading version rows.
+     */
+    readonly mcpTools?: ReadonlyArray<McpToolBinding>;
+    /** How the denormalized bindings were produced: declared on the manifest, or derived from the contract. */
+    readonly mcpToolsSource?: McpToolBindingSource;
     readonly authorName?: string;
     readonly publishedAt: string;
     readonly publishedBy: string;
@@ -239,7 +248,55 @@ export interface ScopeOwnerRow {
     readonly verifiedDomain?: string;
     /** ISO timestamp of the verification, present when `verification: 'verified'`. */
     readonly verifiedAt?: string;
+    /**
+     * F4 identity binding — per-scope allowlist of sigstore certificate
+     * identities (the Fulcio cert's SubjectAlternativeName) permitted to
+     * publish under this scope. Entries are EXACT literal identity
+     * strings — an email (`release@acme.com`) or a CI workflow identity
+     * URI (`https://github.com/acme/app/.github/workflows/publish.yml@refs/heads/main`).
+     * Regex/glob patterns are deliberately NOT stored server-side: an
+     * allowlist is a finite set of named signers, and pattern semantics
+     * would make the authorization decision unauditable.
+     *
+     * Case rule: ONE rule for every identity comparison — the publish
+     * gate matches entries against certificate SANs CASE-INSENSITIVELY
+     * (mirroring the verified-email rule), and the operator tooling
+     * lowercase-normalizes entries at write time.
+     *
+     * Enforcement (publish gate, sigstore-signed publishes only): when
+     * present and non-empty, one of the bundle certificate's SANs MUST
+     * match one of these entries. When absent, the deployment's default
+     * identity rule applies — a SAN must equal the publishing account's
+     * verified email where the deployment provides a resolver;
+     * deployments without one enforce identity only through this
+     * allowlist.
+     *
+     * Fail-closed corruption handling: a storage adapter that finds a
+     * MALFORMED value in this column (anything but an array of strings)
+     * MUST project it as {@link SAN_ALLOWLIST_INVALID}, never as absent
+     * — projecting corrupt policy data as "no allowlist" would silently
+     * downgrade the scope to the weaker default rule. The publish gate
+     * rejects sigstore publishes into such a scope with a
+     * storage-inconsistency error until an operator rewrites the column
+     * (set or clear). Writers MUST only ever write string arrays.
+     *
+     * Managed by the registry operator (never by publish); a first-
+     * publish claim always lands without one, and an ownership transfer
+     * drops it (the previous owner's signer identities must not survive
+     * into the new owner's scope).
+     */
+    readonly sanAllowlist?: readonly string[] | SanAllowlistInvalid;
 }
+/**
+ * Fail-closed marker a storage adapter projects when the
+ * {@link ScopeOwnerRow.sanAllowlist} column holds malformed data (see
+ * that field's docstring). Chosen as a bare string precisely because a
+ * string is itself a malformed value for the column — the marker
+ * round-trips as invalid through every storage impl, so corruption can
+ * never launder itself back into a valid policy.
+ */
+export declare const SAN_ALLOWLIST_INVALID: "invalid";
+export type SanAllowlistInvalid = typeof SAN_ALLOWLIST_INVALID;
 /**
  * `GET /pkg/{scope}/{name}/{version}` body.
  *
@@ -266,6 +323,14 @@ export interface ReadPkgResponse {
     readonly authorPublicKey?: string;
     readonly publishedAt: string;
     readonly publishedBy: string;
+    /**
+     * Verification state of the package's scope. Present only when the
+     * scope-ownership row was read; ABSENT when the scope state is
+     * unknown — absence is not `'unverified'`.
+     */
+    readonly scopeVerification?: ScopeVerification;
+    /** Domain whose control was proven — present only when `scopeVerification: 'verified'`. */
+    readonly verifiedDomain?: string;
 }
 /**
  * One row of `GET /search?…` results — a lightweight per-artifactId
@@ -279,6 +344,19 @@ export interface SearchResultEntry {
     readonly description?: string;
     readonly tags?: readonly string[];
     readonly publishedAt: string;
+    /** MCP tool bindings of the latest version, when the artifact declares or derives any. */
+    readonly mcpTools?: ReadonlyArray<McpToolBinding>;
+    /** How the bindings were produced: declared on the manifest, or derived from a blueprint contract. */
+    readonly mcpToolsSource?: McpToolBindingSource;
+    /**
+     * Verification state of the artifact's scope. Present only when the
+     * scope-ownership row was read; ABSENT when the scope state is
+     * unknown (unclaimed scope or a failed lookup) — absence is not
+     * `'unverified'`.
+     */
+    readonly scopeVerification?: ScopeVerification;
+    /** Domain whose control was proven — present only when `scopeVerification: 'verified'`. */
+    readonly verifiedDomain?: string;
 }
 /**
  * `GET /search?…` body. `nextCursor` is opaque (impl-defined: a
@@ -290,8 +368,8 @@ export interface SearchResponse {
     readonly nextCursor?: string;
 }
 /**
- * `GET /search` sort options. Supports a registry-web "Recent" view
- * that needs `publishedAt`-DESC ordering.
+ * `GET /search` sort options. Supports registry browse UIs that need
+ * a "Recent" view with `publishedAt`-DESC ordering.
  *
  *   - `recent` — order by {@link ArtifactsMetadataRow.publishedAt} DESC.
  *
@@ -382,7 +460,7 @@ export interface PublishResponseBody {
  * propagates to both the wire and the runtime membership check used
  * by downstream guards.
  */
-export declare const PUBLISH_ERROR_CODES: readonly ["unauthorized", "manifest_invalid", "bundle_required", "bundle_too_large", "conformance_failed", "bundle_hash_mismatch", "visibility_algorithm_mismatch", "scope_forbidden", "unknown_key", "signature_invalid", "version_exists", "internal"];
+export declare const PUBLISH_ERROR_CODES: readonly ["unauthorized", "manifest_invalid", "bundle_required", "bundle_too_large", "conformance_failed", "bundle_hash_mismatch", "visibility_algorithm_mismatch", "scope_forbidden", "identity_mismatch", "unknown_key", "signature_invalid", "version_exists", "internal"];
 export type PublishErrorCode = (typeof PUBLISH_ERROR_CODES)[number];
 /**
  * Closed enum for `GET /pkg/:scope/:name[/version]` read responses.
@@ -390,16 +468,21 @@ export type PublishErrorCode = (typeof PUBLISH_ERROR_CODES)[number];
  * `yanked` is the 410-Gone path — the version exists in metadata but
  * the publisher revoked it. Clients SHOULD treat this as a hard
  * failure (don't fall back to a different version automatically).
+ *
+ * There is deliberately NO `forbidden` code: an unauthorized read of
+ * a private row answers with the SAME `not_found` shape as a true
+ * miss, so the wire never confirms a private artifact exists.
  */
-export declare const READ_ERROR_CODES: readonly ["not_found", "forbidden", "invalid_request", "yanked", "server_error"];
+export declare const READ_ERROR_CODES: readonly ["not_found", "invalid_request", "yanked", "server_error"];
 export type ReadErrorCode = (typeof READ_ERROR_CODES)[number];
 /**
- * Closed enum for `GET /search` responses. Same posture as
- * {@link ReadErrorCode} minus the `yanked` path (search filters
- * yanked rows out of the result set; it never surfaces as a top-level
- * error).
+ * Closed enum for `GET /search` responses. Search serves only public
+ * metadata rows and takes no caller identity, so the surface has no
+ * authorization failure at all — just request validation and adapter
+ * faults. (`yanked` likewise never surfaces: search filters yanked
+ * rows out of the result set.)
  */
-export declare const SEARCH_ERROR_CODES: readonly ["forbidden", "invalid_request", "server_error"];
+export declare const SEARCH_ERROR_CODES: readonly ["invalid_request", "server_error"];
 export type SearchErrorCode = (typeof SEARCH_ERROR_CODES)[number];
 /**
  * Closed enum for `POST /author-keys` register responses. An operator
@@ -595,6 +678,19 @@ export interface ArtifactScanFilter {
     readonly hook?: string;
     readonly tag?: string;
     readonly author?: string;
+    /**
+     * Exact MCP tool-name filter. Matches rows whose binding list has an
+     * entry with this tool name — with or without a server. Case-sensitive.
+     * Shared semantics: `matchesMcpToolFilters` in this package.
+     */
+    readonly tool?: string;
+    /**
+     * Exact MCP server-name filter. Matches rows whose binding list has an
+     * entry declaring this server; bare (server-less) entries never match.
+     * Combined with `tool`, requires a single entry carrying exactly that
+     * (server, tool) pair. Case-sensitive.
+     */
+    readonly server?: string;
     readonly limit?: number;
     readonly cursor?: string;
     /**
@@ -611,12 +707,15 @@ export interface ArtifactScanFilter {
  * Closed enum for `GET /pkg/{scope}/{name}` list-versions responses.
  *
  *   - `invalid_request` — missing or malformed `artifactId`.
- *   - `not_found`       — no metadata row for `artifactId`. Distinct
- *                         from "metadata present but every version is
- *                         private + caller unauthed" (that path returns
- *                         200 with `versions: []` — exposing 404 vs
- *                         empty would leak private-row existence).
- *   - `server_error`    — unexpected adapter failure.
+ *   - `not_found`       — no metadata row for `artifactId`, OR no
+ *                         version of it is visible to the caller.
+ *                         The two are DELIBERATELY indistinguishable:
+ *                         any difference between "does not exist" and
+ *                         "exists but you may not see it" is an
+ *                         existence oracle for private artifacts.
+ *   - `server_error`    — unexpected adapter failure. The message is
+ *                         generic by contract — raw storage error text
+ *                         never reaches the wire.
  */
 export declare const LIST_VERSIONS_ERROR_CODES: readonly ["invalid_request", "not_found", "server_error"];
 export type ListVersionsErrorCode = (typeof LIST_VERSIONS_ERROR_CODES)[number];

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,WAAoB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,qCAAsC,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,qBAAsB,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,0PAatB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,kFAMnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2DAIrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,8EAKlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,2CAG/B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,8DAIhC,CAAC;AACX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAAI;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAMA;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GACjB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,qBAAqB,CAAC;AAI1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,2DAI5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,WAAoB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,2GAA2G;IAC3G,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,qCAAsC,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,mBAAmB,CAAC;CACjE;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAG,SAAkB,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,OAAO,qBAAqB,CAAC;AAI/D;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,sGAAsG;IACtG,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,qBAAsB,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,+QActB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,qEAKnB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,8CAGrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,+BAA+B,8EAKlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,2CAG/B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,8DAIhC,CAAC;AACX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAAI;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAMA;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GACjB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,qBAAqB,CAAC;AAI1B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB,2DAI5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/dist/types.js

@@ -18,8 +18,17 @@ export const ARTIFACTS_METADATA_SK = 'metadata#';
  */
 export const SCOPE_VERIFICATIONS = ['unverified', 'verified'];
 /**
- * `GET /search` sort options. Supports a registry-web "Recent" view
- * that needs `publishedAt`-DESC ordering.
+ * Fail-closed marker a storage adapter projects when the
+ * {@link ScopeOwnerRow.sanAllowlist} column holds malformed data (see
+ * that field's docstring). Chosen as a bare string precisely because a
+ * string is itself a malformed value for the column — the marker
+ * round-trips as invalid through every storage impl, so corruption can
+ * never launder itself back into a valid policy.
+ */
+export const SAN_ALLOWLIST_INVALID = 'invalid';
+/**
+ * `GET /search` sort options. Supports registry browse UIs that need
+ * a "Recent" view with `publishedAt`-DESC ordering.
  *
  *   - `recent` — order by {@link ArtifactsMetadataRow.publishedAt} DESC.
  *
@@ -52,6 +61,7 @@ export const PUBLISH_ERROR_CODES = [
     'bundle_hash_mismatch',
     'visibility_algorithm_mismatch',
     'scope_forbidden',
+    'identity_mismatch',
     'unknown_key',
     'signature_invalid',
     'version_exists',
@@ -63,22 +73,25 @@ export const PUBLISH_ERROR_CODES = [
  * `yanked` is the 410-Gone path — the version exists in metadata but
  * the publisher revoked it. Clients SHOULD treat this as a hard
  * failure (don't fall back to a different version automatically).
+ *
+ * There is deliberately NO `forbidden` code: an unauthorized read of
+ * a private row answers with the SAME `not_found` shape as a true
+ * miss, so the wire never confirms a private artifact exists.
  */
 export const READ_ERROR_CODES = [
     'not_found',
-    'forbidden',
     'invalid_request',
     'yanked',
     'server_error',
 ];
 /**
- * Closed enum for `GET /search` responses. Same posture as
- * {@link ReadErrorCode} minus the `yanked` path (search filters
- * yanked rows out of the result set; it never surfaces as a top-level
- * error).
+ * Closed enum for `GET /search` responses. Search serves only public
+ * metadata rows and takes no caller identity, so the surface has no
+ * authorization failure at all — just request validation and adapter
+ * faults. (`yanked` likewise never surfaces: search filters yanked
+ * rows out of the result set.)
  */
 export const SEARCH_ERROR_CODES = [
-    'forbidden',
     'invalid_request',
     'server_error',
 ];
@@ -143,12 +156,15 @@ export function unauthorizedErrorBody() {
  * Closed enum for `GET /pkg/{scope}/{name}` list-versions responses.
  *
  *   - `invalid_request` — missing or malformed `artifactId`.
- *   - `not_found`       — no metadata row for `artifactId`. Distinct
- *                         from "metadata present but every version is
- *                         private + caller unauthed" (that path returns
- *                         200 with `versions: []` — exposing 404 vs
- *                         empty would leak private-row existence).
- *   - `server_error`    — unexpected adapter failure.
+ *   - `not_found`       — no metadata row for `artifactId`, OR no
+ *                         version of it is visible to the caller.
+ *                         The two are DELIBERATELY indistinguishable:
+ *                         any difference between "does not exist" and
+ *                         "exists but you may not see it" is an
+ *                         existence oracle for private artifacts.
+ *   - `server_error`    — unexpected adapter failure. The message is
+ *                         generic by contract — raw storage error text
+ *                         never reaches the wire.
  */
 export const LIST_VERSIONS_ERROR_CODES = [
     'invalid_request',

package/dist/utils/lazy-import.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Memoizing wrapper around a lazy async load. Caches the in-flight (or
+ * already-resolved) promise so concurrent and later callers share one
+ * load — but clears the cache on rejection, so a failed attempt
+ * doesn't poison every later call for the rest of the process.
+ *
+ * A rejected promise is still a defined value, so a bare
+ * `cached ??= loader()` would cache the failure permanently: every
+ * later call would re-throw the same stale rejection even once
+ * whatever caused it (a transient resolution failure, a missing
+ * optional dependency on first use, …) is no longer true. This
+ * wrapper resets the cache to `undefined` on rejection so the next
+ * call starts a fresh attempt, while still deduping callers that
+ * arrive while an attempt is in flight.
+ */
+export declare function memoizedRetryingImport<T>(loader: () => Promise<T>): () => Promise<T>;
+//# sourceMappingURL=lazy-import.d.ts.map

package/dist/utils/lazy-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-import.d.ts","sourceRoot":"","sources":["../../src/utils/lazy-import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAWpF"}

package/dist/utils/lazy-import.js

@@ -0,0 +1,27 @@
+/**
+ * Memoizing wrapper around a lazy async load. Caches the in-flight (or
+ * already-resolved) promise so concurrent and later callers share one
+ * load — but clears the cache on rejection, so a failed attempt
+ * doesn't poison every later call for the rest of the process.
+ *
+ * A rejected promise is still a defined value, so a bare
+ * `cached ??= loader()` would cache the failure permanently: every
+ * later call would re-throw the same stale rejection even once
+ * whatever caused it (a transient resolution failure, a missing
+ * optional dependency on first use, …) is no longer true. This
+ * wrapper resets the cache to `undefined` on rejection so the next
+ * call starts a fresh attempt, while still deduping callers that
+ * arrive while an attempt is in flight.
+ */
+export function memoizedRetryingImport(loader) {
+    let cached;
+    return () => {
+        if (cached === undefined) {
+            cached = loader().catch((err) => {
+                cached = undefined;
+                throw err;
+            });
+        }
+        return cached;
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/registry-core",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Pure-TypeScript registry operations and storage interfaces for the ggui marketplace. No I/O, no HTTP — operations take typed inputs plus a storage deps bag and return discriminated-union results.",
   "keywords": [
     "ggui",
@@ -43,15 +43,20 @@
       "types": "./dist/interfaces/registry-storage.d.ts",
       "import": "./dist/interfaces/registry-storage.js",
       "default": "./dist/interfaces/registry-storage.js"
+    },
+    "./ops/private-read-authz": {
+      "types": "./dist/ops/private-read-authz.d.ts",
+      "import": "./dist/ops/private-read-authz.js",
+      "default": "./dist/ops/private-read-authz.js"
     }
   },
   "dependencies": {
     "esbuild": "0.25.12",
     "oxc-parser": "^0.131.0",
     "zod": "^4.3.6",
-    "@ggui-ai/artifact-manifest": "0.7.0",
-    "@ggui-ai/gadget-signing": "0.7.0",
-    "@ggui-ai/protocol": "0.7.0"
+    "@ggui-ai/protocol": "0.9.0",
+    "@ggui-ai/artifact-manifest": "0.9.0",
+    "@ggui-ai/gadget-signing": "0.9.0"
   },
   "peerDependenciesMeta": {
     "vitest": {
@@ -65,7 +70,8 @@
     "@types/node": "^24.0.0",
     "nock": "^13.5.6",
     "typescript": "^5.0.0",
-    "vitest": "^3.2.6"
+    "vitest": "^3.2.6",
+    "@ggui-ai/protocol-conformance": "0.9.0"
   },
   "repository": {
     "type": "git",