@harrylabsj/kiwi 0.6.0

package/dist/discovery/catalog-source/register.js

@@ -0,0 +1,83 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Commerce Agent Catalog 注册 client（发布侧）——merchant 把自己注册进 catalog，
+ * 供 buyer 经 catalog 发现（消费侧在 source.ts / resolve.ts）。
+ *
+ * POST /v1/agent-catalog/agents/register（kiwi-catalog §10.2）：
+ *   - `domain` 必填（catalog 规范化 canonical domain；本地直连用占位域名）；
+ *   - `agent_card_url` / `ucp_profile_url`：merchant 自己 A2A server 的 well-known。
+ * 返回 catalog_agent_id + status；非 2xx / error 信封 → fail closed（抛 CatalogSourceError）。
+ */
+import { createHmac } from "node:crypto";
+import { CatalogSourceError } from "./errors.js";
+/** 规范化 catalog base URL：去掉尾部斜杠。 */
+export function normalizeCatalogBaseUrl(url) {
+    return url.replace(/\/+$/, "");
+}
+/**
+ * 注册一个 agent 到 catalog（fail closed：非 2xx 或 error 信封 → 抛错）。
+ * 幂等：同 domain + agent_card_url 重复注册由 catalog 侧幂等处理，安全可重试。
+ */
+export async function registerCatalogAgent(input) {
+    const fetchImpl = input.fetchImpl ?? globalThis.fetch;
+    const base = normalizeCatalogBaseUrl(input.catalogBaseUrl);
+    const body = {
+        domain: input.domain,
+        agent_card_url: input.agentCardUrl,
+    };
+    if (input.ucpProfileUrl !== undefined)
+        body.ucp_profile_url = input.ucpProfileUrl;
+    // owner 语义：有 ownerTokenSecret 时绑定 merchant_id 并派生 owner_token；
+    // 否则退回公开自助注册（不带 merchant_id，避免 catalog 拒收）。
+    if (input.merchantId !== undefined && input.ownerTokenSecret !== undefined) {
+        body.merchant_id = input.merchantId;
+        body.owner_token = createHmac("sha256", input.ownerTokenSecret)
+            .update(`kiwi-catalog-owner:${input.merchantId}`)
+            .digest("hex");
+    }
+    let res;
+    try {
+        res = await fetchImpl(`${base}/v1/agent-catalog/agents/register`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+            signal: input.timeoutMs === undefined ? undefined : AbortSignal.timeout(input.timeoutMs),
+        });
+    }
+    catch (err) {
+        throw new CatalogSourceError("request_failed", `catalog register network error: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    let payload;
+    try {
+        payload = (await res.json());
+    }
+    catch {
+        payload = {};
+    }
+    if (!res.ok || payload.ok === false) {
+        const detail = typeof payload.error === "string" ? payload.error : `HTTP ${res.status}`;
+        throw new CatalogSourceError("request_failed", `catalog register failed: ${detail}`);
+    }
+    const agent = payload.catalog_agent;
+    return {
+        ok: true,
+        catalogAgentId: typeof agent?.catalog_agent_id === "string" ? agent.catalog_agent_id : undefined,
+        status: typeof agent?.status === "string" ? agent.status : undefined,
+        verificationEnqueued: payload.verification_enqueued === true,
+    };
+}
+//# sourceMappingURL=register.js.map

package/dist/discovery/catalog-source/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/discovery/catalog-source/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA8BjD,mCAAmC;AACnC,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA2B;IAE3B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,IAAI,GAA2B;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,YAAY;KACnC,CAAC;IACF,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,aAAa,CAAC;IAClF,+DAA+D;IAC/D,4CAA4C;IAC5C,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC;aAC5D,MAAM,CAAC,sBAAsB,KAAK,CAAC,UAAU,EAAE,CAAC;aAChD,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,mCAAmC,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;SACzF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAC1B,gBAAgB,EAChB,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3E,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAoD,CAAC;IAC3E,OAAO;QACL,EAAE,EAAE,IAAI;QACR,cAAc,EAAE,OAAO,KAAK,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QAChG,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACpE,oBAAoB,EAAE,OAAO,CAAC,qBAAqB,KAAK,IAAI;KAC7D,CAAC;AACJ,CAAC"}

package/dist/discovery/catalog-source/schema.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { CandidateAgent } from "./types.js";
+/**
+ * 校验一个候选元素。通过则返回类型化的 CandidateAgent；失败抛
+ * contract_violation（fail-closed）。错误信息带 JSON Pointer 路径便于诊断。
+ */
+export declare function validateCandidate(value: unknown): CandidateAgent;

package/dist/discovery/catalog-source/schema.js

@@ -0,0 +1,63 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * CandidateAgent DTO 1.0 —— ajv 校验（fail-closed，契约 §5.1 guidance 1）。
+ *
+ * Schema 的 canonical 来源是 shopping-cli 仓 `CANDIDATE_AGENT_SCHEMA`（Python
+ * dict），vendored 到 `contracts/candidate-agent-dto-1.0.schema.json`（draft-07，
+ * 来源/同步方式见同目录 README）。Kiwi 消费该 DTO 时 MUST 对每个收到的候选
+ * 元素做 schema 校验；校验失败 → CatalogSourceError("contract_violation")，
+ * 绝不把未校验对象当合法候选使用。
+ *
+ * 实现注记：契约是 draft-07，使用 ajv 默认构建（draft-07 编译器）。仓库其他
+ * frozen contract（shopping.negotiation/0.1）走 Ajv2020（2020-12），两者独立。
+ * ajv 是 CommonJS，NodeNext + verbatimModuleSyntax 下用 createRequire 显式加载。
+ */
+import { readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { CatalogSourceError } from "./errors.js";
+const require = createRequire(import.meta.url);
+const Ajv = require("ajv");
+/** 从本模块定位仓库根：src/discovery/catalog-source/schema.ts → <root>。 */
+function packageRoot() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    return path.resolve(here, "..", "..", "..");
+}
+let compiled;
+function getValidator() {
+    if (compiled !== undefined)
+        return compiled;
+    const file = path.join(packageRoot(), "contracts", "candidate-agent-dto-1.0.schema.json");
+    const schema = JSON.parse(readFileSync(file, "utf-8"));
+    compiled = new Ajv({ allErrors: true }).compile(schema);
+    return compiled;
+}
+/**
+ * 校验一个候选元素。通过则返回类型化的 CandidateAgent；失败抛
+ * contract_violation（fail-closed）。错误信息带 JSON Pointer 路径便于诊断。
+ */
+export function validateCandidate(value) {
+    const validate = getValidator();
+    if (validate(value))
+        return value;
+    const errors = (validate.errors ?? [])
+        .map((e) => `${e.instancePath || "/"} ${e.message ?? "invalid"}`.trim())
+        .join("; ");
+    throw new CatalogSourceError("contract_violation", `CandidateAgent failed DTO 1.0 schema validation: ${errors}`);
+}
+//# sourceMappingURL=schema.js.map

package/dist/discovery/catalog-source/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/discovery/catalog-source/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAExB,CAAC;AAEF,iEAAiE;AACjE,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,IAAI,QAAsC,CAAC;AAE3C,SAAS,YAAY;IACnB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,qCAAqC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;IAClF,QAAQ,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAuB,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,IAAI,kBAAkB,CAC1B,oBAAoB,EACpB,oDAAoD,MAAM,EAAE,CAC7D,CAAC;AACJ,CAAC"}

package/dist/discovery/catalog-source/source.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { CandidateAgent, CatalogSearchQuery } from "./types.js";
+export interface CatalogSourceDeps {
+    /** Catalog 服务根 URL（http/https）。 */
+    baseUrl: string;
+    /** 拉取响应用的 fetch；缺省 globalThis.fetch。 */
+    fetchImpl?: typeof fetch;
+    /** 拉取超时 ms（默认 15000，对齐 AgentDiscovery）。 */
+    timeoutMs?: number;
+    /** 可选 bearer 凭证（Authorization: Bearer …）。 */
+    authToken?: string;
+}
+/** baseUrl 合法性校验：http(s)、无 userinfo、无 query/fragment。 */
+export declare function validateBaseUrl(value: string): string;
+export declare class ShoppingCliCatalogSource {
+    private readonly baseUrl;
+    private readonly deps;
+    constructor(deps: CatalogSourceDeps);
+    /** 核心请求：超时 / HTTP / 网络失败统一映射为 CatalogSourceError。 */
+    private getJson;
+    /**
+     * 搜索候选（设计 §10.1）。响应信封 `{results: […]}`，逐个元素按 schema 校验；
+     * 任何元素违规 → contract_violation。
+     */
+    searchCandidates(query?: CatalogSearchQuery): Promise<CandidateAgent[]>;
+    /**
+     * 按 catalog_agent_id 取单个候选。响应信封 `{catalog_agent: …}`（契约 §5）。
+     */
+    getCandidate(catalogAgentId: string): Promise<CandidateAgent>;
+}
+export type { RawHostingMode } from "./types.js";

package/dist/discovery/catalog-source/source.js

@@ -0,0 +1,197 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * ShoppingCliCatalogSource —— 通过 shopping-cli Commerce Agent Catalog 发现候选。
+ *
+ * 仓库归属（设计 §21）：Agent Catalog API / public CandidateAgent DTO 归
+ * shopping-cli 仓所有；Kiwi 只实现 source 消费端。本类只负责：
+ *
+ *   GET {baseUrl}/v1/agent-catalog/agents/search    → {results: [CandidateAgent…]}
+ *   GET {baseUrl}/v1/agent-catalog/agents/{id}      → {catalog_agent: CandidateAgent}
+ *
+ * 每次响应都按 vendored CandidateAgent DTO 1.0 schema 校验（契约 §5.1 guidance 1）。
+ * 任何校验 / HTTP / 网络 / 超时失败抛 CatalogSourceError（fail-closed，§4.6），
+ * 不静默容错、不自动降级。
+ *
+ * Catalog 返回的是 candidate，不是已证明的在线身份（契约 §1 / 设计 §8.2）：
+ * 升级为 CounterpartyProfile 是 AgentDiscovery.resolveViaCatalog 的职责，不在此类。
+ *
+ * MVP Slice A/B（设计 §27）：Slice A 走 Hosted Agent Catalog；Slice B 走
+ * Independent Agent Discovery，两者都从本类读取候选。
+ */
+import { CatalogSourceError } from "./errors.js";
+import { isRedirectResponse, readJsonBody, SafeHttpError } from "../../net/safe-http.js";
+import { validateCandidate } from "./schema.js";
+const DEFAULT_TIMEOUT_MS = 15_000;
+/** baseUrl 合法性校验：http(s)、无 userinfo、无 query/fragment。 */
+export function validateBaseUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new CatalogSourceError("invalid_input", `catalog baseUrl is not a valid URL: "${value}"`);
+    }
+    if (url.protocol !== "https:" && url.protocol !== "http:") {
+        throw new CatalogSourceError("invalid_input", `catalog baseUrl must use http or https (got ${url.protocol})`);
+    }
+    if (url.username !== "" || url.password !== "") {
+        throw new CatalogSourceError("invalid_input", "catalog baseUrl must not embed credentials (userinfo)");
+    }
+    if (url.search !== "" || url.hash !== "") {
+        throw new CatalogSourceError("invalid_input", "catalog baseUrl must not include query or fragment");
+    }
+    return value.replace(/\/+$/, "");
+}
+const SEARCH_QUERY_KEYS = [
+    "q",
+    "category",
+    "region",
+    "skill",
+    "capability",
+    "protocol",
+    "hosting_mode",
+    "verification_status",
+    "limit",
+    "cursor",
+];
+/**
+ * 序列化搜索查询。类型层已约束合法键；运行时出现未知键抛 invalid_input
+ * （fail-closed，不静默丢弃调用方配置）。
+ */
+function buildSearchQuery(query) {
+    for (const key of Object.keys(query)) {
+        if (!SEARCH_QUERY_KEYS.includes(key)) {
+            throw new CatalogSourceError("invalid_input", `unknown catalog search query key: "${key}"`);
+        }
+    }
+    if (query.limit !== undefined) {
+        if (!Number.isInteger(query.limit) || query.limit <= 0) {
+            throw new CatalogSourceError("invalid_input", `catalog search limit must be a positive integer (got ${query.limit})`);
+        }
+    }
+    const entries = [];
+    const push = (key, value) => {
+        if (value !== undefined)
+            entries.push([key, value]);
+    };
+    push("q", query.q);
+    push("category", query.category);
+    push("region", query.region);
+    push("skill", query.skill);
+    push("capability", query.capability);
+    push("protocol", query.protocol);
+    push("hosting_mode", query.hosting_mode);
+    push("verification_status", query.verification_status);
+    if (query.limit !== undefined)
+        push("limit", String(query.limit));
+    push("cursor", query.cursor);
+    return new URLSearchParams(entries).toString();
+}
+export class ShoppingCliCatalogSource {
+    baseUrl;
+    deps;
+    constructor(deps) {
+        this.baseUrl = validateBaseUrl(deps.baseUrl);
+        this.deps = deps;
+    }
+    /** 核心请求：超时 / HTTP / 网络失败统一映射为 CatalogSourceError。 */
+    async getJson(requestPath) {
+        const fetchImpl = this.deps.fetchImpl ?? globalThis.fetch;
+        const timeoutMs = this.deps.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        const url = `${this.baseUrl}${requestPath}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        let response;
+        try {
+            response = await fetchImpl(url, {
+                // 出站加固：绝不跟随重定向（3xx 目标不经过校验，且可能转发 Bearer 头）。
+                redirect: "manual",
+                signal: controller.signal,
+                headers: {
+                    accept: "application/json",
+                    ...(this.deps.authToken !== undefined
+                        ? { authorization: `Bearer ${this.deps.authToken}` }
+                        : {}),
+                },
+            });
+        }
+        catch (err) {
+            const name = err?.name;
+            const detail = err instanceof Error ? err.message : String(err);
+            throw new CatalogSourceError("request_failed", name === "AbortError"
+                ? `catalog request timed out after ${timeoutMs}ms: ${url}`
+                : `catalog request failed: ${url} (${detail})`);
+        }
+        if (isRedirectResponse(response)) {
+            throw new CatalogSourceError("request_failed", `catalog request must not follow redirects (HTTP ${response.status} from ${url})`);
+        }
+        if (!response.ok) {
+            throw new CatalogSourceError("request_failed", `catalog request returned HTTP ${response.status} from ${url}`);
+        }
+        let raw;
+        try {
+            // 响应体读取在超时覆盖内 + 大小上限（出站加固）。
+            raw = await readJsonBody(response, { signal: controller.signal });
+        }
+        catch (err) {
+            if (controller.signal.aborted) {
+                throw new CatalogSourceError("request_failed", `catalog request timed out after ${timeoutMs}ms while reading response: ${url}`);
+            }
+            throw new CatalogSourceError("response_invalid", err instanceof SafeHttpError && err.code === "response_too_large"
+                ? `catalog response from ${url}: ${err.message}`
+                : `catalog response from ${url} is not valid JSON`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        return raw;
+    }
+    /**
+     * 搜索候选（设计 §10.1）。响应信封 `{results: […]}`，逐个元素按 schema 校验；
+     * 任何元素违规 → contract_violation。
+     */
+    async searchCandidates(query = {}) {
+        const qs = buildSearchQuery(query);
+        const raw = await this.getJson(`/v1/agent-catalog/agents/search${qs.length > 0 ? `?${qs}` : ""}`);
+        if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+            throw new CatalogSourceError("response_invalid", "catalog search response must be a JSON object");
+        }
+        const body = raw;
+        if (!Array.isArray(body.results)) {
+            throw new CatalogSourceError("response_invalid", 'catalog search response is missing array field "results"');
+        }
+        return body.results.map((element) => validateCandidate(element));
+    }
+    /**
+     * 按 catalog_agent_id 取单个候选。响应信封 `{catalog_agent: …}`（契约 §5）。
+     */
+    async getCandidate(catalogAgentId) {
+        if (typeof catalogAgentId !== "string" || catalogAgentId.length === 0) {
+            throw new CatalogSourceError("invalid_input", "catalogAgentId must be a non-empty string");
+        }
+        const raw = await this.getJson(`/v1/agent-catalog/agents/${encodeURIComponent(catalogAgentId)}`);
+        if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+            throw new CatalogSourceError("response_invalid", "catalog get response must be a JSON object");
+        }
+        const body = raw;
+        if (body.catalog_agent === undefined) {
+            throw new CatalogSourceError("response_invalid", 'catalog get response is missing field "catalog_agent"');
+        }
+        return validateCandidate(body.catalog_agent);
+    }
+}
+//# sourceMappingURL=source.js.map

package/dist/discovery/catalog-source/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../src/discovery/catalog-source/source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAchD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,wCAAwC,KAAK,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,kBAAkB,CAC1B,eAAe,EACf,+CAA+C,GAAG,CAAC,QAAQ,GAAG,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAC1B,eAAe,EACf,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAC1B,eAAe,EACf,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,iBAAiB,GAA0C;IAC/D,GAAG;IACH,UAAU;IACV,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,UAAU;IACV,cAAc;IACd,qBAAqB;IACrB,OAAO;IACP,QAAQ;CACT,CAAC;AAEF;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAyB;IACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAA+B,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,sCAAsC,GAAG,GAAG,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,kBAAkB,CAC1B,eAAe,EACf,wDAAwD,KAAK,CAAC,KAAK,GAAG,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAyB,EAAQ,EAAE;QAC5D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,wBAAwB;IAClB,OAAO,CAAS;IAChB,IAAI,CAAoB;IAEzC,YAAY,IAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,qDAAqD;IAC7C,KAAK,CAAC,OAAO,CAAC,WAAmB;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC9B,4CAA4C;gBAC5C,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE;wBACpD,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAC;YACrD,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,kBAAkB,CAC1B,gBAAgB,EAChB,IAAI,KAAK,YAAY;gBACnB,CAAC,CAAC,mCAAmC,SAAS,OAAO,GAAG,EAAE;gBAC1D,CAAC,CAAC,2BAA2B,GAAG,KAAK,MAAM,GAAG,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,kBAAkB,CAC1B,gBAAgB,EAChB,mDAAmD,QAAQ,CAAC,MAAM,SAAS,GAAG,GAAG,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAC1B,gBAAgB,EAChB,iCAAiC,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,4BAA4B;YAC5B,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,kBAAkB,CAC1B,gBAAgB,EAChB,mCAAmC,SAAS,8BAA8B,GAAG,EAAE,CAChF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB;gBAC/D,CAAC,CAAC,yBAAyB,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE;gBAChD,CAAC,CAAC,yBAAyB,GAAG,oBAAoB,CACrD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAA4B,EAAE;QACnD,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,kCAAkC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClE,CAAC;QACF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAA8B,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,cAAsB;QACvC,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,4BAA4B,kBAAkB,CAAC,cAAc,CAAC,EAAE,CACjE,CAAC;QACF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAA8B,CAAC;QAC5C,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/discovery/catalog-source/types.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * CandidateAgent DTO 1.0 —— 类型定义（对齐契约，字段以 schema 为准）。
+ *
+ * 契约来源：shopping-cli 仓 `CANDIDATE_AGENT_SCHEMA`（vendored 到
+ * contracts/candidate-agent-dto-1.0.schema.json），规范文档
+ * docs/a2a/candidate-agent-dto-1.0.md。Kiwi 侧 **MUST NOT** 重定义 wire 形状；
+ * 本文件是 schema 的 TS 投影，运行时校验以 ajv 编译后的 schema 为准。
+ *
+ * 关键语义（契约 §1）：CandidateAgent 是“可发现的商品代理”，**不是**已证明的
+ * 在线身份。Kiwi 必须对其做 fresh verification 才能升级为 CounterpartyProfile。
+ *
+ * hosting.mode（设计 §22）：canonical 值为 direct_only / hosted_only / hybrid /
+ * unknown；DB 遗留值 direct / hosted 向后兼容保留，通过 normalizeHostingMode
+ * 归一化为 canonical 值（无法识别的值 fail-closed 到 unknown）。
+ */
+/** verification.status 已知取值（契约 §4.7 / 设计 §6 state machine）。 */
+export type VerificationStatus = "discovered" | "profile_valid" | "domain_verified" | "agent_verified" | "commerce_verified" | "stale" | "unreachable" | "suspended" | "rejected";
+/** hosting.mode 原始值（schema enum：canonical + legacy alias）。 */
+export type RawHostingMode = "direct" | "hosted" | "hybrid" | "unknown" | "direct_only" | "hosted_only";
+/** hosting.mode canonical 值（设计 §22）。 */
+export type HostingMode = "direct_only" | "hosted_only" | "hybrid" | "unknown";
+/** 契约注解（契约 §3）：name 恒为 candidate-agent，version 恒为 1.0（const）。 */
+export interface CandidateContract {
+    name: "candidate-agent";
+    version: "1.0";
+}
+/** 公开 merchant 引用（契约 §4.2，public-only）。 */
+export interface CandidateMerchant {
+    id: string;
+    name: string;
+    city?: string;
+    service_area?: string;
+    domain?: string;
+    tags?: string[];
+}
+/** 公开发现端点（契约 §4.3；internal hosted_gateway 永不出现）。 */
+export interface CandidateDiscovery {
+    agent_card_url?: string;
+    ucp_profile_url?: string;
+    a2a_urls?: string[];
+}
+/** 公开 skill（契约 §4.6）。 */
+export interface CandidateSkill {
+    skill_id: string;
+    name: string;
+    description?: string;
+    tags?: string[];
+}
+/** verification 状态快照（契约 §4.7）。 */
+export interface CandidateVerification {
+    status: VerificationStatus;
+    last_verified_at?: string;
+}
+/** hosting 模式快照（契约 §4.8，canonical 见 §22）。 */
+export interface CandidateHosting {
+    mode: RawHostingMode;
+}
+/**
+ * CandidateAgent —— catalog 返回的候选对象（契约 1.0）。
+ * 必填：catalog_agent_id / verification / hosting / contract；其余均可选。
+ * 通过 ajv 校验后该对象可安全使用（schema additionalProperties: false）。
+ */
+export interface CandidateAgent {
+    catalog_agent_id: string;
+    merchant?: CandidateMerchant;
+    discovery?: CandidateDiscovery;
+    /** protocol 名 → 版本数组（契约 §4.4，版本串 verbatim）。 */
+    protocols?: Record<string, string[]>;
+    /** 全限定 capability 标识（契约 §4.5，namespace:capability_id）。 */
+    capabilities?: string[];
+    skills?: CandidateSkill[];
+    verification: CandidateVerification;
+    hosting: CandidateHosting;
+    contract: CandidateContract;
+}
+/**
+ * 归一化 hosting.mode 到 canonical 值（契约 §4.8 to_contract_hosting_mode）。
+ * legacy direct → direct_only、hosted → hosted_only；其余原样。
+ */
+export declare function normalizeHostingMode(mode: RawHostingMode): HostingMode;
+/**
+ * CatalogSource 统一接口：legacy `ShoppingCliCatalogSource`（/v1/agent-catalog/*）
+ * 与产品化 `KiwiCatalogSource`（/v1/agents/*）都满足；resolve.ts 的
+ * resolveViaCatalog 可互换使用。返回的候选都必须是已通过契约校验的
+ * CandidateAgent（DTO 1.0 形状）。
+ */
+export interface CatalogSource {
+    searchCandidates(query: CatalogSearchQuery): Promise<CandidateAgent[]>;
+    getCandidate(catalogAgentId: string): Promise<CandidateAgent>;
+}
+/**
+ * Catalog 搜索查询（设计 §10.1 子集）。类型层约束合法键；运行时非法键抛
+ * invalid_input（fail-closed，不静默丢弃）。
+ */
+export interface CatalogSearchQuery {
+    q?: string;
+    category?: string;
+    region?: string;
+    skill?: string;
+    capability?: string;
+    protocol?: string;
+    /** hosting_mode：接受 canonical 或 legacy 值（§22）。 */
+    hosting_mode?: RawHostingMode;
+    verification_status?: VerificationStatus;
+    limit?: number;
+    cursor?: string;
+}

package/dist/discovery/catalog-source/types.js

@@ -0,0 +1,30 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 归一化 hosting.mode 到 canonical 值（契约 §4.8 to_contract_hosting_mode）。
+ * legacy direct → direct_only、hosted → hosted_only；其余原样。
+ */
+export function normalizeHostingMode(mode) {
+    switch (mode) {
+        case "direct":
+            return "direct_only";
+        case "hosted":
+            return "hosted_only";
+        default:
+            return mode;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/discovery/catalog-source/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/discovery/catalog-source/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkGH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/discovery/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * discovery — AgentDiscovery（§33）：Agent Card 拉取/校验 + capability
+ * intersection + identity bootstrap + channel candidates。
+ */
+export { AgentDiscovery, DiscoveryError } from "./resolve.js";
+export type { CatalogDiscoveryDeps, DiscoveryDeps, DiscoveryErrorCode, DiscoveryInput, ResolvedCatalogCandidate, UcpDiscoveryDeps, } from "./resolve.js";
+export * from "./agent-card/index.js";
+export * from "./capability/index.js";
+export * from "./catalog-source/index.js";
+export * from "./ucp/index.js";

package/dist/discovery/index.js

@@ -0,0 +1,25 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * discovery — AgentDiscovery（§33）：Agent Card 拉取/校验 + capability
+ * intersection + identity bootstrap + channel candidates。
+ */
+export { AgentDiscovery, DiscoveryError } from "./resolve.js";
+export * from "./agent-card/index.js";
+export * from "./capability/index.js";
+export * from "./catalog-source/index.js";
+export * from "./ucp/index.js";
+//# sourceMappingURL=index.js.map

package/dist/discovery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/discovery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAU9D,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC"}