@ggui-ai/registry-server 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -453,6 +453,13 @@ function parseCursor(cursor) {
|
|
|
453
453
|
* `matchesMcpToolFilters` so the reference semantics cannot drift.
|
|
454
454
|
*/
|
|
455
455
|
function rowMatchesFilter(row, q) {
|
|
456
|
+
// #474 — visibility gating lives INSIDE every scanArtifacts impl
|
|
457
|
+
// (the ruled canonical location); the search op's post-filter stays
|
|
458
|
+
// as defense-in-depth. Without this, private rows would consume
|
|
459
|
+
// page slots on self-host impls even though the op filters them out
|
|
460
|
+
// before they ever reach the wire.
|
|
461
|
+
if (row.visibility !== 'public')
|
|
462
|
+
return false;
|
|
456
463
|
if (q.kind !== undefined && row.kind !== q.kind)
|
|
457
464
|
return false;
|
|
458
465
|
if (q.hook !== undefined && row.hook !== q.hook)
|
package/dist/server.js
CHANGED
|
@@ -280,7 +280,7 @@ export function createRegistryApp(options) {
|
|
|
280
280
|
catch {
|
|
281
281
|
return c.json({ ok: false, errors: [{ code: 'manifest_invalid', message: 'request body is not valid JSON' }] }, 400);
|
|
282
282
|
}
|
|
283
|
-
const result = checkConformance(payload);
|
|
283
|
+
const result = await checkConformance(payload);
|
|
284
284
|
// Domain-vs-transport split: a "non-conformant" submission is a
|
|
285
285
|
// valid request that produced a `ok: false` body. Mirrors the cloud
|
|
286
286
|
// conformance handler's wire shape.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ggui-ai/registry-server",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.9.0",
|
|
4
4
|
"description": "Self-hostable HTTP server for the ggui marketplace registry. Wraps @ggui-ai/registry-core with hono, filesystem storage, and bearer-token auth. Run via npx for local dev, CI, and on-prem deployments.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"ggui",
|
|
@@ -31,9 +31,9 @@
|
|
|
31
31
|
"dependencies": {
|
|
32
32
|
"@hono/node-server": "^2.0.12",
|
|
33
33
|
"hono": "^4.12.8",
|
|
34
|
-
"@ggui-ai/artifact-manifest": "0.
|
|
35
|
-
"@ggui-ai/gadget-signing": "0.
|
|
36
|
-
"@ggui-ai/registry-core": "0.
|
|
34
|
+
"@ggui-ai/artifact-manifest": "0.9.0",
|
|
35
|
+
"@ggui-ai/gadget-signing": "0.9.0",
|
|
36
|
+
"@ggui-ai/registry-core": "0.9.0"
|
|
37
37
|
},
|
|
38
38
|
"devDependencies": {
|
|
39
39
|
"@sigstore/mock": "~0.12.1",
|