@ggui-ai/registry-server 0.6.3 → 0.7.0

package/dist/authn/bearer.js

@@ -37,7 +37,7 @@
  *   emits 401 with `{ error: 'unauthorized', message: ... }`.
  *
  * **Observable violation:**
- * - The integration test in `server.test.ts` exercises three negative
+ * - The integration test in `server.integration.test.ts` exercises three negative
  *   paths (no header, wrong scheme, bad token) and asserts identical
  *   401 responses. Any divergence — a different status, a leaked
  *   token hint in the body — is a contract violation.

package/dist/filesystem-registry-storage.d.ts

@@ -1,4 +1,4 @@
-import type { RegistryStorage } from '@ggui-ai/registry-core';
+import { type RegistryStorage } from '@ggui-ai/registry-core';
 export interface FilesystemRegistryStorageOptions {
     /** Absolute path to the state root. Must already exist or be `mkdir -p`-able. */
     readonly root: string;

package/dist/filesystem-registry-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-registry-storage.d.ts","sourceRoot":"","sources":["../src/filesystem-registry-storage.ts"],"names":[],"mappings":"AAiEA,OAAO,KAAK,EAMV,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAKhC,MAAM,WAAW,gCAAgC;IAC/C,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,gCAAgC,GACxC,eAAe,CAkMjB"}
+{"version":3,"file":"filesystem-registry-storage.d.ts","sourceRoot":"","sources":["../src/filesystem-registry-storage.ts"],"names":[],"mappings":"AAoEA,OAAO,EAOL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAKhC,MAAM,WAAW,gCAAgC;IAC/C,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,gCAAgC,GACxC,eAAe,CA2SjB"}

package/dist/filesystem-registry-storage.js

@@ -5,6 +5,7 @@
  *   <root>/state/plugins/<encoded artifactId>.json     → ArtifactsMetadataRow
  *   <root>/state/versions/<encoded artifactId>__<v>.json → ArtifactVersionRow
  *   <root>/state/author-keys/<subject>__<keyId>.json   → AuthorKeyRow
+ *   <root>/state/scope-owners/<encoded scope>.json     → ScopeOwnerRow
  *
  * The `__` separator is chosen because npm pkg names + semvers never
  * contain it (semver disallows underscores entirely; npm names disallow
@@ -19,6 +20,8 @@
  * Mirrors DDB's `ConditionExpression: attribute_not_exists(...)`. The
  * happy-path write is atomic at the inode level — partial writes on
  * crash leave the file absent rather than half-populated.
+ * {@link claimScope} uses the same `wx` primitive for its first-writer-
+ * wins scope claim (`EEXIST` → `{ conflict: true }`).
  *
  * ## Path-traversal defense
  *
@@ -61,8 +64,9 @@
  *   {@link registryStorageContract} suite against a fresh tmpdir per
  *   test. Plus path-traversal rejection tests local to this file.
  */
-import { mkdir, readFile, readdir, writeFile } from 'node:fs/promises';
+import { mkdir, readFile, readdir, unlink, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
+import { AuthorKeyAlreadyExistsError, } from '@ggui-ai/registry-core';
 const DEFAULT_LIMIT = 50;
 const MAX_LIMIT = 200;
 export function createFilesystemRegistryStorage(options) {
@@ -74,6 +78,13 @@ export function createFilesystemRegistryStorage(options) {
     // hex digest + `.json`. The digest itself is filename-safe (hex
     // chars only), so no URL-encoding is needed.
     const compiledBlobsDir = join(stateRoot, 'compiled-blobs');
+    // Scope-ownership rows — one file per claimed scope. The scope is
+    // URL-encoded like every other row key (`@` → `%40`).
+    const scopeOwnersDir = join(stateRoot, 'scope-owners');
+    const scopeOwnerPath = (scope) => {
+        rejectTraversal(scope, 'scope');
+        return join(scopeOwnersDir, `${encodeRowKey(scope)}.json`);
+    };
     const compiledBlobPath = (compiledDigest) => {
         rejectTraversal(compiledDigest, 'compiledDigest');
         return join(compiledBlobsDir, `${compiledDigest}.json`);
@@ -84,7 +95,13 @@ export function createFilesystemRegistryStorage(options) {
         return join(versionsDir, `${encodeRowKey(artifactId)}__${encodeRowKey(version)}.json`);
     };
     const authorKeyPath = (subject, keyId) => {
-        rejectTraversal(subject, 'subject');
+        // NO rejectTraversal on `subject`: subjects are operator-defined
+        // free text (a '/' is legal), and `encodeRowKey` neutralizes every
+        // traversal-capable character ('/' → %2F) before the value ever
+        // becomes a filename component — the appended `__<keyId>.json`
+        // suffix additionally guarantees the segment can never be a bare
+        // '..'. keyIds keep the guard as defense-in-depth (base64url by
+        // derivation — '.', '/', '\\' are unrepresentable).
         rejectTraversal(keyId, 'keyId');
         return join(authorKeysDir, `${encodeRowKey(subject)}__${encodeRowKey(keyId)}.json`);
     };
@@ -223,14 +240,94 @@ export function createFilesystemRegistryStorage(options) {
                 throw err;
             }
         },
+        async getScopeOwner(scope) {
+            return readJsonOrNull(scopeOwnerPath(scope));
+        },
+        async claimScope(row) {
+            // Atomic first-writer-wins via `wx` (open(2) O_EXCL) — mirrors
+            // the conditional-create semantics of a hosted database adapter.
+            // EEXIST maps to `{ conflict: true }` with the winner's file
+            // untouched.
+            await ensureDir(scopeOwnersDir);
+            try {
+                await writeFile(scopeOwnerPath(row.scope), JSON.stringify(row, null, 2), {
+                    flag: 'wx',
+                    encoding: 'utf8',
+                });
+                return { ok: true };
+            }
+            catch (err) {
+                if (isErrnoException(err) && err.code === 'EEXIST') {
+                    return { conflict: true };
+                }
+                throw err;
+            }
+        },
+        async updateScopeOwner(row, expect) {
+            // Compare-and-set against the caller's read snapshot. Atomicity
+            // note: the read-compare-write sequence relies on the OSS
+            // server's single-process, single-writer posture (the same
+            // documented caveat as commitVersionAndBlob's blob leg) — the
+            // `wx` seed path below is additionally inode-atomic.
+            await ensureDir(scopeOwnersDir);
+            const path = scopeOwnerPath(row.scope);
+            if ('absent' in expect) {
+                // Seed path — O_EXCL create, EEXIST means a claim (or another
+                // seed) landed first.
+                try {
+                    await writeFile(path, JSON.stringify(row, null, 2), {
+                        flag: 'wx',
+                        encoding: 'utf8',
+                    });
+                    return { ok: true };
+                }
+                catch (err) {
+                    if (isErrnoException(err) && err.code === 'EEXIST') {
+                        return { conflict: true };
+                    }
+                    throw err;
+                }
+            }
+            const current = await readJsonOrNull(path);
+            if (current === null ||
+                current.ownerSubject !== expect.ownerSubject ||
+                current.verification !== expect.verification) {
+                return { conflict: true };
+            }
+            await writeJson(path, row);
+            return { ok: true };
+        },
         async getAuthorKey(subject, keyId) {
             return readJsonOrNull(authorKeyPath(subject, keyId));
         },
-        async putAuthorKey(row) {
+        async putAuthorKey(row, options) {
             await ensureDir(authorKeysDir);
-            await writeJson(authorKeyPath(row.subject, row.keyId), row);
+            const path = authorKeyPath(row.subject, row.keyId);
+            if (options?.ifNotExists === true) {
+                // O_EXCL conditional create — same `wx` primitive as
+                // putArtifactVersionIfAbsent/claimScope. EEXIST maps to the
+                // typed conflict the register op's TOCTOU close dispatches on.
+                try {
+                    await writeFile(path, JSON.stringify(row, null, 2), {
+                        flag: 'wx',
+                        encoding: 'utf8',
+                    });
+                    return;
+                }
+                catch (err) {
+                    if (isErrnoException(err) && err.code === 'EEXIST') {
+                        throw new AuthorKeyAlreadyExistsError(row.subject, row.keyId);
+                    }
+                    throw err;
+                }
+            }
+            await writeJson(path, row);
         },
         async listAuthorKeys(subject) {
+            // Filename-prefix candidate scan, then a row-field filter — the
+            // row's own `subject` is the unambiguous ownership signal
+            // (encodeRowKey leaves '_' unescaped, so a prefix alone could
+            // cross-match subjects containing '__').
             const prefix = `${encodeRowKey(subject)}__`;
             let entries;
             try {
@@ -246,11 +343,25 @@ export function createFilesystemRegistryStorage(options) {
                 if (!entry.startsWith(prefix) || !entry.endsWith('.json'))
                     continue;
                 const row = await readJsonOrNull(join(authorKeysDir, entry));
-                if (row !== null)
+                if (row !== null && row.subject === subject)
                     matches.push(row);
             }
             return matches;
         },
+        async deleteAuthorKey(subject, keyId) {
+            // ENOENT is the "row absent" signal (mirrors reads), mapped to
+            // the contract's `false`; anything else is a transport failure
+            // and throws.
+            try {
+                await unlink(authorKeyPath(subject, keyId));
+                return true;
+            }
+            catch (err) {
+                if (isErrnoException(err) && err.code === 'ENOENT')
+                    return false;
+                throw err;
+            }
+        },
     };
 }
 /**

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { BlueprintProbeRunner, BundleStorage, RegistryStorage } from '@ggui-ai/registry-core';
+import type { BlueprintProbeRunner, BundleStorage, PublishArtifactDeps, RegistryStorage } from '@ggui-ai/registry-core';
 import type { BearerAuthn } from './authn/bearer.js';
 export { createBearerAuthn, type BearerAuthn, type CreateBearerAuthnOptions } from './authn/bearer.js';
 export { createFilesystemBundleStorage, type FilesystemBundleStorageOptions, } from './filesystem-bundle-storage.js';
@@ -40,6 +40,12 @@ export interface CreateRegistryServerOptions {
      * e2e fixtures, not unauthenticated public publish endpoints.
      */
     readonly blueprintProbe?: BlueprintProbeRunner;
+    /**
+     * Optional TUF trust-root tuning for sigstore-cosign publish
+     * verification. Forwarded to `createRegistryApp` (see
+     * {@link RegistryAppOptions.sigstoreTuf}).
+     */
+    readonly sigstoreTuf?: PublishArtifactDeps['sigstoreTuf'];
 }
 export interface RegistryServerHandle {
     /** The port the server is actually bound to. Resolves after {@link start}. */

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EACL,6BAA6B,EAC7B,KAAK,8BAA8B,GACpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,+BAA+B,EAC/B,KAAK,gCAAgC,GACtC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEzE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAiDtB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EACL,6BAA6B,EAC7B,KAAK,8BAA8B,GACpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,+BAA+B,EAC/B,KAAK,gCAAgC,GACtC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEzE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAoDtB"}

package/dist/index.js

@@ -34,6 +34,9 @@ export function createRegistryServer(options) {
         ...(options.blueprintProbe !== undefined
             ? { blueprintProbe: options.blueprintProbe }
             : {}),
+        ...(options.sigstoreTuf !== undefined
+            ? { sigstoreTuf: options.sigstoreTuf }
+            : {}),
     });
     const host = options.host ?? '0.0.0.0';
     const requestedPort = options.port ?? 9001;

package/dist/server.d.ts

@@ -6,6 +6,9 @@
  *   GET  /search                           → searchArtifacts
  *   GET  /pkg/:scope/:name/:version        → readArtifact
  *   POST /publish                          → publishArtifact (bearer-gated)
+ *   POST /author-keys                      → registerAuthorKey (bearer-gated)
+ *   GET  /author-keys                      → listAuthorKeys (bearer-gated)
+ *   DELETE /author-keys/:keyId             → deleteAuthorKey (bearer-gated)
  *   POST /conformance/check                → checkConformance (pre-flight gate)
  *   GET  /bundles/:scope/:name/:version/bundle.js
  *   GET  /bundles/:scope/:name/:version/bundle.js.sig
@@ -24,7 +27,7 @@
  * browser-side).
  */
 import { Hono } from 'hono';
-import { type BlueprintProbeRunner, type BundleStorage, type RegistryStorage } from '@ggui-ai/registry-core';
+import { type BlueprintProbeRunner, type PublishArtifactDeps, type BundleStorage, type RegistryStorage } from '@ggui-ai/registry-core';
 import type { BearerAuthn } from './authn/bearer.js';
 export interface RegistryAppOptions {
     readonly storage: RegistryStorage;
@@ -41,6 +44,15 @@ export interface RegistryAppOptions {
      * only the static gates from `checkConformance`.
      */
     readonly blueprintProbe?: BlueprintProbeRunner;
+    /**
+     * Optional TUF trust-root tuning for sigstore-cosign publish
+     * verification, forwarded verbatim to the publish op. Point
+     * `tufMirrorURL` + `tufRootPath` at an alternative TUF repository
+     * (private sigstore deployments; hermetic tests); `tufCachePath` /
+     * `tufForceCache` control cache placement + warm reuse. Unset =
+     * the sigstore public-good trust root.
+     */
+    readonly sigstoreTuf?: PublishArtifactDeps['sigstoreTuf'];
 }
 /**
  * Build the hono app. Does NOT bind a port — callers (the CLI, the

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAKL,KAAK,oBAAoB,EAGzB,KAAK,aAAa,EAIlB,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;CAChD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAwQnE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAQL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EAGxB,KAAK,aAAa,EAIlB,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC;CAC3D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAkSnE"}

package/dist/server.js

@@ -6,6 +6,9 @@
  *   GET  /search                           → searchArtifacts
  *   GET  /pkg/:scope/:name/:version        → readArtifact
  *   POST /publish                          → publishArtifact (bearer-gated)
+ *   POST /author-keys                      → registerAuthorKey (bearer-gated)
+ *   GET  /author-keys                      → listAuthorKeys (bearer-gated)
+ *   DELETE /author-keys/:keyId             → deleteAuthorKey (bearer-gated)
  *   POST /conformance/check                → checkConformance (pre-flight gate)
  *   GET  /bundles/:scope/:name/:version/bundle.js
  *   GET  /bundles/:scope/:name/:version/bundle.js.sig
@@ -24,7 +27,7 @@
  * browser-side).
  */
 import { Hono } from 'hono';
-import { checkConformance, listArtifactVersions, publishArtifact, registerAuthorKey, readArtifact, searchArtifacts, } from '@ggui-ai/registry-core';
+import { checkConformance, deleteAuthorKey, unauthorizedErrorBody, listArtifactVersions, listAuthorKeys, publishArtifact, registerAuthorKey, readArtifact, searchArtifacts, } from '@ggui-ai/registry-core';
 const IMMUTABLE_CACHE_HEADER = 'public, max-age=31536000, immutable';
 /**
  * Build the hono app. Does NOT bind a port — callers (the CLI, the
@@ -36,19 +39,27 @@ export function createRegistryApp(options) {
     const { storage, bundleStorage, authn, registryHostname } = options;
     const clock = options.clock ?? (() => new Date());
     const blueprintProbe = options.blueprintProbe;
+    const sigstoreTuf = options.sigstoreTuf;
     const app = new Hono();
+    // Shared bearer gate for every authed route — ONE verification call
+    // shape, ONE 401 body (`unauthorizedErrorBody`, exported beside the
+    // registry-core error enums so every transport of this wire contract
+    // agrees).
+    const verifyBearer = (c) => authn.verify(c.req.header('authorization'));
     // CORS — permissive read; strict for /publish. Adds ACAO headers
     // AFTER the route runs so they overlay on the route's response.
     app.use('*', async (c, next) => {
         const path = c.req.path;
         const isPublishRoute = path === '/publish';
         if (c.req.method === 'OPTIONS' && !isPublishRoute) {
-            // Preflight short-circuit for read routes.
+            // Preflight short-circuit for read routes. DELETE is listed for
+            // the author-key management route — a browser console revokes
+            // keys cross-origin ([E]).
             return new Response(null, {
                 status: 204,
                 headers: {
                     'Access-Control-Allow-Origin': '*',
-                    'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+                    'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
                     'Access-Control-Allow-Headers': 'content-type, authorization',
                 },
             });
@@ -56,7 +67,7 @@ export function createRegistryApp(options) {
         await next();
         if (!isPublishRoute) {
             c.res.headers.set('Access-Control-Allow-Origin', '*');
-            c.res.headers.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+            c.res.headers.set('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS');
             c.res.headers.set('Access-Control-Allow-Headers', 'content-type, authorization');
         }
     });
@@ -135,13 +146,9 @@ export function createRegistryApp(options) {
             // Defensive: don't echo. Browsers will reject without the
             // ACAO header, which is the protection we want.
         }
-        const authHeader = c.req.header('authorization');
-        const verified = authn.verify(authHeader);
+        const verified = verifyBearer(c);
         if (verified === null) {
-            return c.json({
-                error: 'unauthorized',
-                message: 'publish requires a valid bearer token in the Authorization header',
-            }, 401);
+            return c.json(unauthorizedErrorBody(), 401);
         }
         let body;
         try {
@@ -162,6 +169,7 @@ export function createRegistryApp(options) {
             clock,
             registryHostname,
             ...(blueprintProbe !== undefined ? { blueprintProbe } : {}),
+            ...(sigstoreTuf !== undefined ? { sigstoreTuf } : {}),
         });
         return c.json(result.body, result.status);
     });
@@ -170,13 +178,9 @@ export function createRegistryApp(options) {
     // bearer-authenticated subject's identity. Shares one wire contract
     // with the hosted registry's author-keys endpoint.
     app.post('/author-keys', async (c) => {
-        const authHeader = c.req.header('authorization');
-        const verified = authn.verify(authHeader);
+        const verified = verifyBearer(c);
         if (verified === null) {
-            return c.json({
-                error: 'unauthorized',
-                message: 'author-keys requires a valid bearer token in the Authorization header',
-            }, 401);
+            return c.json(unauthorizedErrorBody(), 401);
         }
         let rawBody;
         try {
@@ -201,7 +205,37 @@ export function createRegistryApp(options) {
                 message: '`publicKeyBase64` must be a string',
             }, 400);
         }
-        const result = await registerAuthorKey({ publicKeyBase64: body.publicKeyBase64 }, { storage, authn: verified });
+        const result = await registerAuthorKey({
+            publicKeyBase64: body.publicKeyBase64,
+            ...(body.label !== undefined ? { label: body.label } : {}),
+        }, { storage, authn: verified, clock });
+        return c.json(result.body, result.status);
+    });
+    // ── GET /author-keys ─────────────────────────────────────────────────
+    // Lists the bearer-authenticated subject's registered signing keys.
+    // Bearer REQUIRED: "my keys" has no anonymous projection, so a
+    // missing/invalid token is a 401 — never an empty anonymous list.
+    app.get('/author-keys', async (c) => {
+        const verified = verifyBearer(c);
+        if (verified === null) {
+            return c.json(unauthorizedErrorBody(), 401);
+        }
+        const result = await listAuthorKeys({ storage, authn: verified });
+        return c.json(result.body, result.status);
+    });
+    // ── DELETE /author-keys/:keyId ───────────────────────────────────────
+    // Hard-deletes the caller's `(subject, keyId)` row. Idempotent
+    // (absent → 200 `deleted: false`) and subject-scoped — see the op's
+    // docstring. Bearer REQUIRED, same as the list route. keyIds are
+    // base64url (`derivePublicKeyId`) — URL-safe by construction, the
+    // path param is the keyId verbatim.
+    app.delete('/author-keys/:keyId', async (c) => {
+        const verified = verifyBearer(c);
+        if (verified === null) {
+            return c.json(unauthorizedErrorBody(), 401);
+        }
+        const { keyId } = c.req.param();
+        const result = await deleteAuthorKey({ keyId }, { storage, authn: verified });
         return c.json(result.body, result.status);
     });
     // ── /conformance/check ───────────────────────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/registry-server",
-  "version": "0.6.3",
+  "version": "0.7.0",
   "description": "Self-hostable HTTP server for the ggui marketplace registry. Wraps @ggui-ai/registry-core with hono, filesystem storage, and bearer-token auth. Run via npx for local dev, CI, and on-prem deployments.",
   "keywords": [
     "ggui",
@@ -31,12 +31,16 @@
   "dependencies": {
     "@hono/node-server": "^2.0.12",
     "hono": "^4.12.8",
-    "@ggui-ai/artifact-manifest": "0.6.3",
-    "@ggui-ai/gadget-signing": "0.6.3",
-    "@ggui-ai/registry-core": "0.6.3"
+    "@ggui-ai/artifact-manifest": "0.7.0",
+    "@ggui-ai/gadget-signing": "0.7.0",
+    "@ggui-ai/registry-core": "0.7.0"
   },
   "devDependencies": {
+    "@sigstore/mock": "~0.12.1",
+    "@sigstore/protobuf-specs": "^0.5.1",
+    "@tufjs/repo-mock": "4.0.1",
     "@types/node": "^24.0.0",
+    "nock": "^13.5.6",
     "tsx": "^4.19.0",
     "typescript": "^5.0.0",
     "vitest": "^3.2.6"