@moltzap/identity 2026.902.0

package/dist/registry/admission.js

@@ -0,0 +1,107 @@
+/** @file Registry-owned bootstrap admission before private dispatch. */
+import { Effect, Redacted, Schema } from "effect";
+import { createHash, timingSafeEqual } from "node:crypto";
+import { Ed25519PublicKey } from "../agent-key.js";
+import { parseCanonicalJson } from "../canonical-json.js";
+import { AuthenticationFailedError, MalformedRequestError, OverloadedError, VersionMismatchError, } from "../http-errors.js";
+import { verifyHttpRequestSignature, } from "../http-signature.js";
+import { hasCanonicalBase64UrlLength } from "../identifiers.js";
+import { MOLTZAP_VERSION } from "../version.js";
+import { registrationBody, } from "./contract.js";
+const registrationPublicKeyRepresentation = Schema.Struct({
+    crv: Schema.Literal("Ed25519"),
+    kty: Schema.Literal("OKP"),
+    x: Schema.String.pipe(Schema.filter((value) => hasCanonicalBase64UrlLength(value, 32))),
+});
+const minimumRegistrationBody = Schema.Struct({
+    request: Schema.Struct({
+        publicKey: registrationPublicKeyRepresentation,
+    }),
+});
+const admissionValue = /^MoltZap-Admission ((?=.{8,512}$)[A-Za-z0-9\-._~+/]+=*)$/;
+/**
+ * Verifies Registry-owned bootstrap admission through its durable replay step.
+ *
+ * @param input Bootstrap boundary dependencies and request.
+ * @param input.httpRequest Server request carrying signed framing.
+ * @param input.bodyBytes Bounded body octets covered by the signature.
+ * @param input.admissionCredential Configured bootstrap secret.
+ * @param input.nonceCapacity Maximum live bootstrap nonces.
+ * @param input.storage Durable nonce store.
+ * @returns The complete registration request after every admission check.
+ */
+export function verifyBootstrapRegistration(input) {
+    return Effect.gen(function* () {
+        const parsedBody = yield* malformedRequest(parseCanonicalJson(Uint8Array.from(input.bodyBytes)));
+        const minimum = yield* malformedRequest(Schema.decodeUnknown(minimumRegistrationBody)(parsedBody));
+        yield* requireAdmissionCredential(input);
+        const publicKey = yield* authenticatePublicKey(minimum.request.publicKey);
+        const signature = yield* verifyHttpRequestSignature({
+            httpRequest: input.httpRequest,
+            bodyBytes: input.bodyBytes,
+            publicKey,
+            profile: "registration",
+        });
+        yield* claimNonce(input, signature);
+        if (input.httpRequest.headers["moltzap-version"] !== MOLTZAP_VERSION) {
+            return yield* new VersionMismatchError();
+        }
+        const complete = yield* malformedRequest(Schema.decodeUnknown(registrationBody)(parsedBody, {
+            exact: true,
+            onExcessProperty: "error",
+        }));
+        return complete.request;
+    }).pipe(Effect.withSpan("verifyBootstrapRegistration"));
+}
+function malformedRequest(effect) {
+    return effect.pipe(
+    // eslint-disable-next-line agent-code-guard/no-effect-error-coalescing -- Canonical JSON and closed request-schema failures share one exact public malformed envelope.
+    Effect.mapError(() => new MalformedRequestError()));
+}
+function requireAdmissionCredential(input) {
+    const credential = readAdmissionCredential(input.httpRequest.headers.authorization);
+    return credential !== undefined &&
+        sameCredential(credential, input.admissionCredential)
+        ? Effect.void
+        : Effect.fail(new AuthenticationFailedError());
+}
+function authenticatePublicKey(candidate) {
+    return Schema.decodeUnknown(Ed25519PublicKey)(candidate).pipe(
+    // eslint-disable-next-line agent-code-guard/no-effect-error-coalescing -- A syntactically valid but cryptographically unusable verification key is an authentication failure.
+    Effect.mapError(() => new AuthenticationFailedError()));
+}
+function claimNonce(input, signature) {
+    return Effect.gen(function* () {
+        const claim = yield* input.storage.claimRegistrationNonce({
+            nonce: signature.nonce,
+            expires: signature.expires,
+            now: signature.verifiedAt,
+            capacity: input.nonceCapacity,
+        });
+        if (claim === "replayed") {
+            return yield* new AuthenticationFailedError();
+        }
+        if (claim === "full") {
+            return yield* new OverloadedError();
+        }
+    });
+}
+function readAdmissionCredential(authorization) {
+    if (authorization === undefined) {
+        return undefined;
+    }
+    const match = admissionValue.exec(authorization);
+    if (match === null) {
+        return undefined;
+    }
+    const credential = match[1];
+    return typeof credential === "string" ? credential : undefined;
+}
+function sameCredential(received, configured) {
+    const receivedDigest = createHash("sha256").update(received).digest();
+    const configuredDigest = createHash("sha256")
+        .update(Redacted.value(configured))
+        .digest();
+    return timingSafeEqual(receivedDigest, configuredDigest);
+}
+//# sourceMappingURL=admission.js.map

package/dist/registry/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../../src/registry/admission.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAGxE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,yBAAyB,EAEzB,qBAAqB,EACrB,eAAe,EAEf,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAEvB,MAAM,mCAAmC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1B,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CACnB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CACjE;CACF,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,SAAS,EAAE,mCAAmC;KAC/C,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,cAAc,GAClB,0DAA0D,CAAC;AAU7D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAiC;IAUjC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACxC,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACrD,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACrC,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,UAAU,CAAC,CAC1D,CAAC;QACF,KAAK,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;YAClD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS;YACT,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,eAAe,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACtC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,UAAU,EAAE;YACjD,KAAK,EAAE,IAAI;YACX,gBAAgB,EAAE,OAAO;SAC1B,CAAC,CACH,CAAC;QACF,OAAO,QAAQ,CAAC,OAAO,CAAC;IAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA8B;IAE9B,OAAO,MAAM,CAAC,IAAI;IAChB,uKAAuK;IACvK,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAiC;IAEjC,MAAM,UAAU,GAAG,uBAAuB,CACxC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CACxC,CAAC;IACF,OAAO,UAAU,KAAK,SAAS;QAC7B,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAA0D;IAE1D,OAAO,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI;IAC3D,8KAA8K;IAC9K,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,yBAAyB,EAAE,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,KAAiC,EACjC,SAAgC;IAQhC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC;YACxD,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,EAAE,SAAS,CAAC,UAAU;YACzB,QAAQ,EAAE,KAAK,CAAC,aAAa;SAC9B,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,IAAI,yBAAyB,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,aAAsB;IACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CACrB,QAAgB,EAChB,UAA6B;IAE7B,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACtE,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC1C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;SAClC,MAAM,EAAE,CAAC;IACZ,OAAO,eAAe,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;AAC3D,CAAC"}

package/dist/registry/client.d.ts

@@ -0,0 +1,20 @@
+/** @file Authenticated HTTP adapter behind the public Registry capability. */
+import { HttpClient } from "@effect/platform";
+import { Duration, Effect } from "effect";
+import { type Ed25519PublicKey } from "../agent-key.js";
+import { type RegistryClientService } from "./contract.js";
+/**
+ * Builds the service installed behind the public Registry capability.
+ *
+ * @param input Immutable Registry client configuration.
+ * @param input.origin Registry HTTP origin.
+ * @param input.registrySignerPublicKey Pinned Registry verification key.
+ * @param input.requestTimeout Complete per-call deadline.
+ * @returns The configured service, requiring an Effect HTTP client.
+ */
+export declare function makeRegistryService(input: {
+    readonly origin: URL;
+    readonly registrySignerPublicKey: Ed25519PublicKey;
+    readonly requestTimeout: Duration.Duration;
+}): Effect.Effect<RegistryClientService, never, HttpClient.HttpClient>;
+//# sourceMappingURL=client.d.ts.map

package/dist/registry/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/registry/client.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EACL,UAAU,EAGX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAsC,MAAM,QAAQ,CAAC;AAG9E,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAiB/E,OAAO,EAQL,KAAK,qBAAqB,EAW3B,MAAM,eAAe,CAAC;AAEvB;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,uBAAuB,EAAE,gBAAgB,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;CAC5C,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CA4BrE"}

package/dist/registry/client.js

@@ -0,0 +1,250 @@
+/** @file Authenticated HTTP adapter behind the public Registry capability. */
+import { HttpClient, HttpClientRequest, } from "@effect/platform";
+import { Duration, Effect, Either, Encoding, Redacted, Schema } from "effect";
+import { AgentCard } from "../agent-card.js";
+import { AgentSigningAuthority } from "../agent-key.js";
+import { decodeCanonicalJson, encodeCanonicalJson } from "../canonical-json.js";
+import { AuthenticationFailedError, InternalServerError, MalformedRequestError, MethodNotAllowedError, OverloadedError, PayloadTooLargeError, RouteNotFoundError, UnavailableError, UnsupportedMediaTypeError, VersionMismatchError, } from "../http-errors.js";
+import { AgentSigningError, signHttpRequest } from "../http-signature.js";
+import { MOLTZAP_VERSION } from "../version.js";
+import { LIST_PATH, listResponseSchema, LOOKUP_PATH, lookupResponseSchema, REGISTER_PATH, registerResponseSchema, registrationBody, RegistryConnectionError, RegistryInvalidResponseError, RegistryListRequest, RegistryLookupRequest, RegistryRequestTimeoutError, } from "./contract.js";
+/**
+ * Builds the service installed behind the public Registry capability.
+ *
+ * @param input Immutable Registry client configuration.
+ * @param input.origin Registry HTTP origin.
+ * @param input.registrySignerPublicKey Pinned Registry verification key.
+ * @param input.requestTimeout Complete per-call deadline.
+ * @returns The configured service, requiring an Effect HTTP client.
+ */
+export function makeRegistryService(input) {
+    const origin = new URL(input.origin.href);
+    const requestTimeout = Duration.millis(Duration.toMillis(input.requestTimeout));
+    return Effect.map(HttpClient.HttpClient, (client) => ({
+        register: makeRegister({
+            client,
+            origin,
+            registrySignerPublicKey: input.registrySignerPublicKey,
+            requestTimeout,
+        }),
+        lookup: makeLookup({
+            client,
+            origin,
+            registrySignerPublicKey: input.registrySignerPublicKey,
+            requestTimeout,
+        }),
+        list: makeList({
+            client,
+            origin,
+            registrySignerPublicKey: input.registrySignerPublicKey,
+            requestTimeout,
+        }),
+    }));
+}
+const errorEnvelope = new Map([
+    [
+        400,
+        { body: '{"error":"malformed"}', make: () => new MalformedRequestError() },
+    ],
+    [
+        401,
+        {
+            body: '{"error":"authentication_failed"}',
+            make: () => new AuthenticationFailedError(),
+        },
+    ],
+    [
+        404,
+        { body: '{"error":"not_found"}', make: () => new RouteNotFoundError() },
+    ],
+    [
+        405,
+        {
+            body: '{"error":"method_not_allowed"}',
+            make: () => new MethodNotAllowedError(),
+        },
+    ],
+    [
+        412,
+        {
+            body: '{"error":"version_mismatch"}',
+            make: () => new VersionMismatchError(),
+        },
+    ],
+    [
+        413,
+        {
+            body: '{"error":"payload_too_large"}',
+            make: () => new PayloadTooLargeError(),
+        },
+    ],
+    [
+        415,
+        {
+            body: '{"error":"unsupported_media_type"}',
+            make: () => new UnsupportedMediaTypeError(),
+        },
+    ],
+    [429, { body: '{"error":"overloaded"}', make: () => new OverloadedError() }],
+    [
+        503,
+        { body: '{"error":"unavailable"}', make: () => new UnavailableError() },
+    ],
+    [
+        500,
+        { body: '{"error":"internal"}', make: () => new InternalServerError() },
+    ],
+]);
+const invalidResponse = () => new RegistryInvalidResponseError();
+const textDecoder = new TextDecoder("utf-8", {
+    fatal: true,
+    ignoreBOM: true,
+});
+const exactText = (bytes) => {
+    try {
+        return textDecoder.decode(bytes);
+        // eslint-disable-next-line agent-code-guard/bare-catch -- Invalid UTF-8 is an ordinary closed-response validation failure. #ignore-sloppy-code-next-line[bare-catch]: The decoder returns undefined.
+    }
+    catch {
+        return undefined;
+    }
+};
+const operationDeclares = (operation, error) => operation === "register" || error._tag !== "AuthenticationFailedError";
+const connectionFailure = (effect) => effect.pipe(
+// eslint-disable-next-line agent-code-guard/no-effect-error-coalescing -- The client exposes one transport failure without leaking platform implementation details.
+Effect.mapError(() => new RegistryConnectionError()));
+const readResponseBytes = (response) => connectionFailure(response.arrayBuffer).pipe(Effect.map((buffer) => new Uint8Array(buffer)));
+const decodeEnvelope = (operation, response, bytes) => {
+    if (response.headers["content-type"] !== "application/json") {
+        return Effect.fail(invalidResponse());
+    }
+    const expected = errorEnvelope.get(response.status);
+    const actual = exactText(bytes);
+    if (expected === undefined || actual !== expected.body) {
+        return Effect.fail(invalidResponse());
+    }
+    const error = expected.make();
+    return operationDeclares(operation, error)
+        ? Effect.fail(error)
+        : Effect.fail(invalidResponse());
+};
+const execute = (input) => connectionFailure(input.client.execute(input.request)).pipe(Effect.flatMap((response) => readResponseBytes(response).pipe(Effect.flatMap((bytes) => response.status === 200
+    ? Effect.succeed([response, bytes])
+    : decodeEnvelope(input.operation, response, bytes)))));
+const executePublicRead = (input) => execute(input).pipe(Effect.catchTag("AuthenticationFailedError", () => Effect.fail(invalidResponse())));
+const requireJsonSuccess = (response) => response.headers["content-type"] === "application/json"
+    ? Effect.void
+    : Effect.fail(invalidResponse());
+const encodeRequest = (schema, request) => Schema.encode(schema)(request).pipe(Effect.mapError(invalidResponse), Effect.flatMap(encodeCanonicalJson), Effect.mapError(invalidResponse));
+const verifyCard = (agentCard, registrySignerPublicKey) => AgentCard.verify({ agentCard, registrySignerPublicKey }).pipe(Effect.mapError(invalidResponse));
+const decodeAgentIdBytes = (agentId) => Either.match(Encoding.decodeBase64Url(agentId.slice(4)), {
+    // The AgentId type already proves this branch unreachable.
+    onLeft: () => new Uint8Array(),
+    onRight: (bytes) => bytes,
+});
+const compareAgentIds = (left, right) => {
+    const leftBytes = decodeAgentIdBytes(left);
+    const rightBytes = decodeAgentIdBytes(right);
+    for (let index = 0; index < leftBytes.byteLength; index += 1) {
+        const difference = (leftBytes[index] ?? 0) - (rightBytes[index] ?? 0);
+        if (difference !== 0) {
+            return difference;
+        }
+    }
+    return 0;
+};
+const withDeadline = (effect, timeout) => effect.pipe(Effect.timeoutFail({
+    duration: timeout,
+    onTimeout: () => new RegistryRequestTimeoutError(),
+}));
+const makePost = (origin, path, bodyBytes) => HttpClientRequest.post(new URL(path, origin)).pipe(HttpClientRequest.bodyUint8Array(bodyBytes, "application/json"), HttpClientRequest.setHeader("moltzap-version", MOLTZAP_VERSION));
+const makeSignedRegistrationRequest = (input, call) => Effect.gen(function* () {
+    if (AgentSigningAuthority.publicKey(call.signingAuthority).x !==
+        call.request.publicKey.x) {
+        return yield* new AgentSigningError();
+    }
+    const bodyBytes = yield* encodeRequest(registrationBody, {
+        request: call.request,
+    });
+    const httpRequest = makePost(input.origin, REGISTER_PATH, bodyBytes).pipe(HttpClientRequest.setHeader("authorization", `MoltZap-Admission ${Redacted.value(call.admissionCredential)}`));
+    return yield* signHttpRequest({
+        httpRequest,
+        bodyBytes,
+        signingAuthority: call.signingAuthority,
+        profile: "registration",
+    });
+});
+const registrationMatchesCall = (agentCard, call) => agentCard.principalId === call.request.principalId &&
+    agentCard.agentName === call.request.agentName &&
+    agentCard.publicKey.x === call.request.publicKey.x;
+const decodeRegistrationResult = (input, call, responseBytes) => Effect.gen(function* () {
+    const result = yield* decodeCanonicalJson(registerResponseSchema, responseBytes).pipe(Effect.mapError(invalidResponse));
+    if (result.kind !== "registered") {
+        return Object.freeze({ kind: result.kind });
+    }
+    const agentCard = yield* verifyCard(result.agentCard, input.registrySignerPublicKey);
+    if (!registrationMatchesCall(agentCard, call)) {
+        return yield* invalidResponse();
+    }
+    return Object.freeze({ kind: "registered", agentCard });
+});
+function makeRegister(input) {
+    return (call) => Effect.gen(function* () {
+        const request = yield* makeSignedRegistrationRequest(input, call);
+        const [response, responseBytes] = yield* execute({
+            client: input.client,
+            request,
+            operation: "register",
+        });
+        yield* requireJsonSuccess(response);
+        return yield* decodeRegistrationResult(input, call, responseBytes);
+    }).pipe((effect) => withDeadline(effect, input.requestTimeout));
+}
+function makeLookup(input) {
+    return (call) => Effect.gen(function* () {
+        const bodyBytes = yield* encodeRequest(RegistryLookupRequest, call);
+        const [response, responseBytes] = yield* executePublicRead({
+            client: input.client,
+            request: makePost(input.origin, LOOKUP_PATH, bodyBytes),
+            operation: "lookup",
+        });
+        yield* requireJsonSuccess(response);
+        const result = yield* decodeCanonicalJson(lookupResponseSchema, responseBytes).pipe(Effect.mapError(invalidResponse));
+        if (result.kind === "not_found") {
+            return Object.freeze({ kind: "not_found" });
+        }
+        const agentCard = yield* verifyCard(result.agentCard, input.registrySignerPublicKey);
+        if (("agentId" in call && agentCard.agentId !== call.agentId) ||
+            ("agentName" in call && agentCard.agentName !== call.agentName)) {
+            return yield* invalidResponse();
+        }
+        return Object.freeze({ kind: "found", agentCard });
+    }).pipe((effect) => withDeadline(effect, input.requestTimeout));
+}
+function makeList(input) {
+    return (call) => Effect.gen(function* () {
+        const bodyBytes = yield* encodeRequest(RegistryListRequest, call);
+        const [response, responseBytes] = yield* executePublicRead({
+            client: input.client,
+            request: makePost(input.origin, LIST_PATH, bodyBytes),
+            operation: "list",
+        });
+        yield* requireJsonSuccess(response);
+        const result = yield* decodeCanonicalJson(listResponseSchema, responseBytes).pipe(Effect.mapError(invalidResponse));
+        const agentCards = yield* Effect.forEach(result.agentCards, (card) => verifyCard(card, input.registrySignerPublicKey), { concurrency: 1 });
+        let previous = call.afterAgentId;
+        for (const card of agentCards) {
+            if (previous !== undefined &&
+                compareAgentIds(previous, card.agentId) >= 0) {
+                return yield* invalidResponse();
+            }
+            previous = card.agentId;
+        }
+        return Object.freeze({
+            kind: "page",
+            agentCards: Object.freeze([...agentCards]),
+            hasMore: result.hasMore,
+        });
+    }).pipe((effect) => withDeadline(effect, input.requestTimeout));
+}
+//# sourceMappingURL=client.js.map

package/dist/registry/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/registry/client.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EACL,UAAU,EACV,iBAAiB,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9E,OAAO,EAAE,SAAS,EAA0B,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,yBAAyB,EAEzB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,aAAa,EACb,sBAAsB,EACtB,gBAAgB,EAEhB,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EAEnB,qBAAqB,EAKrB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAEvB;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CACpC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CACxC,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CACf,UAAU,CAAC,UAAU,EACrB,CAAC,MAAM,EAAyB,EAAE,CAAC,CAAC;QAClC,QAAQ,EAAE,YAAY,CAAC;YACrB,MAAM;YACN,MAAM;YACN,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,cAAc;SACf,CAAC;QACF,MAAM,EAAE,UAAU,CAAC;YACjB,MAAM;YACN,MAAM;YACN,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,cAAc;SACf,CAAC;QACF,IAAI,EAAE,QAAQ,CAAC;YACb,MAAM;YACN,MAAM;YACN,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,cAAc;SACf,CAAC;KACH,CAAC,CACH,CAAC;AACJ,CAAC;AAOD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAwB;IACnD;QACE,GAAG;QACH,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,EAAE;KAC3E;IACD;QACE,GAAG;QACH;YACE,IAAI,EAAE,mCAAmC;YACzC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,yBAAyB,EAAE;SAC5C;KACF;IACD;QACE,GAAG;QACH,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,EAAE,EAAE;KACxE;IACD;QACE,GAAG;QACH;YACE,IAAI,EAAE,gCAAgC;YACtC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE;SACxC;KACF;IACD;QACE,GAAG;QACH;YACE,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,oBAAoB,EAAE;SACvC;KACF;IACD;QACE,GAAG;QACH;YACE,IAAI,EAAE,+BAA+B;YACrC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,oBAAoB,EAAE;SACvC;KACF;IACD;QACE,GAAG;QACH;YACE,IAAI,EAAE,oCAAoC;YAC1C,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,yBAAyB,EAAE;SAC5C;KACF;IACD,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,eAAe,EAAE,EAAE,CAAC;IAC5E;QACE,GAAG;QACH,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,EAAE,EAAE;KACxE;IACD;QACE,GAAG;QACH,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE,EAAE;KACxE;CACF,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,GAAiC,EAAE,CACzD,IAAI,4BAA4B,EAAE,CAAC;AAErC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE;IAC3C,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAsB,EAAE;IAC1D,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,qMAAqM;IACvM,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAUF,MAAM,iBAAiB,GAAG,CACxB,SAA0B,EAC1B,KAAwB,EACf,EAAE,CACX,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,CAAC;AAEzE,MAAM,iBAAiB,GAAG,CACxB,MAA8B,EACgB,EAAE,CAChD,MAAM,CAAC,IAAI;AACT,oKAAoK;AACpK,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,uBAAuB,EAAE,CAAC,CACrD,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CACxB,QAA+C,EACK,EAAE,CACtD,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAC/C,CAAC;AAEJ,MAAM,cAAc,GAAG,CACrB,SAA0B,EAC1B,QAA+C,EAC/C,KAAiB,EACuD,EAAE;IAC1E,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,kBAAkB,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAIhB,EAGC,EAAE,CACF,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,QAAQ,CAAC,MAAM,KAAK,GAAG;IACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAU,CAAC;IAC5C,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CACrD,CACF,CACF,CACF,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CAAC,KAI1B,EAAE,EAAE,CACH,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAC/B,CACF,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CACzB,QAA+C,EACI,EAAE,CACrD,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,kBAAkB;IACrD,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;AAErC,MAAM,aAAa,GAAG,CACpB,MAA2B,EAC3B,OAAU,EAC+C,EAAE,CAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAChC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EACnC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CACjC,CAAC;AAEJ,MAAM,UAAU,GAAG,CACjB,SAAoB,EACpB,uBAAyC,EACuB,EAAE,CAClE,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CACjC,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAc,EAAE,CAC1D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;IACvD,2DAA2D;IAC3D,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;CAC1B,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CAAC,IAAa,EAAE,KAAc,EAAU,EAAE;IAChE,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,MAA2B,EAC3B,OAA0B,EACyB,EAAE,CACrD,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,WAAW,CAAC;IACjB,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,2BAA2B,EAAE;CACnD,CAAC,CACH,CAAC;AAEJ,MAAM,QAAQ,GAAG,CACf,MAAW,EACX,IAAY,EACZ,SAAqB,EACgB,EAAE,CACvC,iBAAiB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAChD,iBAAiB,CAAC,cAAc,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAC/D,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAChE,CAAC;AAEJ,MAAM,6BAA6B,GAAG,CACpC,KAA0B,EAC1B,IAA0B,EAC1B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IACE,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EACxB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,gBAAgB,EAAE;QACvD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,IAAI,CACvE,iBAAiB,CAAC,SAAS,CACzB,eAAe,EACf,qBAAqB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAChE,CACF,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC;QAC5B,WAAW;QACX,SAAS;QACT,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,uBAAuB,GAAG,CAC9B,SAA4B,EAC5B,IAA0B,EACjB,EAAE,CACX,SAAS,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW;IAClD,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS;IAC9C,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAErD,MAAM,wBAAwB,GAAG,CAC/B,KAA0B,EAC1B,IAA0B,EAC1B,aAAyB,EAC4C,EAAE,CACvE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACvC,sBAAsB,EACtB,aAAa,CACd,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CACjC,MAAM,CAAC,SAAS,EAChB,KAAK,CAAC,uBAAuB,CAC9B,CAAC;IACF,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEL,SAAS,YAAY,CACnB,KAA0B;IAW1B,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,SAAS,EAAE,UAAU;SACtB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CACjB,KAA0B;IAU1B,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACzD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC;YACvD,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACvC,oBAAoB,EACpB,aAAa,CACd,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CACjC,MAAM,CAAC,SAAS,EAChB,KAAK,CAAC,uBAAuB,CAC9B,CAAC;QACF,IACE,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;YACzD,CAAC,WAAW,IAAI,IAAI,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,EAC/D,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CACf,KAA0B;IAU1B,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACzD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;YACrD,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACvC,kBAAkB,EAClB,aAAa,CACd,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACtC,MAAM,CAAC,UAAU,EACjB,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,uBAAuB,CAAC,EACzD,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;QACF,IAAI,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IACE,QAAQ,KAAK,SAAS;gBACtB,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAC5C,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;YAClC,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;YAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AACpE,CAAC"}

package/dist/registry/contract.d.ts

@@ -0,0 +1,213 @@
+/** @file Complete Registry-owned client, request, and representation contract. */
+import { type Effect, type Redacted, Schema } from "effect";
+import type { HttpEnvelopeError } from "../http-errors.js";
+import type { AgentSigningError } from "../http-signature.js";
+import { AgentCard, type VerifiedAgentCard } from "../agent-card.js";
+import { type AgentSigningAuthority, Ed25519PublicKey } from "../agent-key.js";
+/** Idempotency identity for a registration operation. */
+export declare const OperationId: Schema.brand<Schema.filter<typeof Schema.String>, "OperationId">;
+/** Validated nominal value decoded by OperationId. */
+export type OperationId = typeof OperationId.Type;
+declare const RegistryConnectionError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RegistryConnectionError";
+} & Readonly<A>;
+/** The Registry connection could not be established or used. */
+export declare class RegistryConnectionError extends RegistryConnectionError_base {
+}
+declare const RegistryRequestTimeoutError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RegistryRequestTimeoutError";
+} & Readonly<A>;
+/** The configured complete Registry call deadline expired. */
+export declare class RegistryRequestTimeoutError extends RegistryRequestTimeoutError_base {
+}
+declare const RegistryInvalidResponseError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RegistryInvalidResponseError";
+} & Readonly<A>;
+/** A Registry response did not match the selected operation contract. */
+export declare class RegistryInvalidResponseError extends RegistryInvalidResponseError_base {
+}
+/** Closed Registry bootstrap registration request. */
+export declare const RegistryRegisterRequest: Schema.Struct<{
+    operationId: Schema.brand<Schema.filter<typeof Schema.String>, "OperationId">;
+    principalId: Schema.brand<Schema.filter<typeof Schema.String>, "PrincipalId">;
+    agentName: Schema.brand<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>, "AgentName">;
+    publicKey: Schema.brand<Schema.transform<Schema.Struct<{
+        crv: Schema.Literal<["Ed25519"]>;
+        kty: Schema.Literal<["OKP"]>;
+        x: Schema.filter<typeof Schema.String>;
+    }>, Schema.declare<Readonly<{
+        crv: "Ed25519";
+        kty: "OKP";
+        x: string;
+    }>, Readonly<{
+        crv: "Ed25519";
+        kty: "OKP";
+        x: string;
+    }>, readonly [], never>>, "Ed25519PublicKey">;
+}>;
+/** Validated Registry bootstrap registration request. */
+export type RegistryRegisterRequest = typeof RegistryRegisterRequest.Type;
+/** Closed Registry lookup selector. */
+export declare const RegistryLookupRequest: Schema.Union<[Schema.Struct<{
+    agentId: Schema.brand<Schema.filter<typeof Schema.String>, "AgentId">;
+}>, Schema.Struct<{
+    agentName: Schema.brand<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>, "AgentName">;
+}>]>;
+/** Validated Registry lookup selector. */
+export type RegistryLookupRequest = typeof RegistryLookupRequest.Type;
+/** Closed Registry list continuation request. */
+export declare const RegistryListRequest: Schema.Struct<{
+    afterAgentId: Schema.optional<Schema.brand<Schema.filter<typeof Schema.String>, "AgentId">>;
+}>;
+/** Validated Registry list continuation request. */
+export type RegistryListRequest = typeof RegistryListRequest.Type;
+/** Closed domain outcome from one bootstrap registration attempt. */
+export type RegistryRegisterResult = Readonly<{
+    kind: "registered";
+    agentCard: VerifiedAgentCard;
+}> | Readonly<{
+    kind: "name_taken";
+}> | Readonly<{
+    kind: "key_already_registered";
+}> | Readonly<{
+    kind: "idempotency_conflict";
+}>;
+/** Closed domain outcome from one public identity lookup. */
+export type RegistryLookupResult = Readonly<{
+    kind: "found";
+    agentCard: VerifiedAgentCard;
+}> | Readonly<{
+    kind: "not_found";
+}>;
+/** One deterministic page of complete immutable AgentCards. */
+export type RegistryListResult = Readonly<{
+    kind: "page";
+    agentCards: readonly VerifiedAgentCard[];
+    hasMore: boolean;
+}>;
+/** Complete bootstrap registration call made through the Registry client. */
+export type RegistryRegisterCall = Readonly<{
+    request: RegistryRegisterRequest;
+    admissionCredential: Redacted.Redacted;
+    signingAuthority: AgentSigningAuthority;
+}>;
+/** Closed Registry client implementation failures. */
+type RegistryClientError = RegistryConnectionError | RegistryRequestTimeoutError | RegistryInvalidResponseError;
+/** Shared envelopes accepted by public Registry reads. */
+export type RegistryPublicReadError = Exclude<HttpEnvelopeError, {
+    readonly _tag: "AuthenticationFailedError";
+}>;
+/** Structural service installed behind the public Registry capability. */
+export interface RegistryClientService {
+    readonly register: (input: RegistryRegisterCall) => Effect.Effect<RegistryRegisterResult, HttpEnvelopeError | RegistryClientError | AgentSigningError>;
+    readonly lookup: (request: RegistryLookupRequest) => Effect.Effect<RegistryLookupResult, RegistryPublicReadError | RegistryClientError>;
+    readonly list: (request: RegistryListRequest) => Effect.Effect<RegistryListResult, RegistryPublicReadError | RegistryClientError>;
+}
+/** Package-private validated registration outcome. */
+export declare const registerResultSchema: Schema.Union<[Schema.Struct<{
+    kind: Schema.Literal<["registered"]>;
+    agentCard: Schema.declare<VerifiedAgentCard, VerifiedAgentCard, readonly [], never>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["name_taken"]>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["key_already_registered"]>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["idempotency_conflict"]>;
+}>]>;
+/** Package-private validated lookup outcome. */
+export declare const lookupResultSchema: Schema.Union<[Schema.Struct<{
+    kind: Schema.Literal<["found"]>;
+    agentCard: Schema.declare<VerifiedAgentCard, VerifiedAgentCard, readonly [], never>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["not_found"]>;
+}>]>;
+/** Package-private validated list outcome. */
+export declare const listResultSchema: Schema.Struct<{
+    kind: Schema.Literal<["page"]>;
+    agentCards: Schema.Array$<Schema.declare<VerifiedAgentCard, VerifiedAgentCard, readonly [], never>>;
+    hasMore: typeof Schema.Boolean;
+}>;
+/** Exact registration response representation used by both HTTP adapters. */
+export declare const registerResponseSchema: Schema.Union<[Schema.Struct<{
+    kind: Schema.Literal<["registered"]>;
+    agentCard: Schema.Schema<AgentCard, unknown, never> & Readonly<{
+        readonly verify: (input: {
+            readonly agentCard: AgentCard;
+            readonly registrySignerPublicKey: Ed25519PublicKey;
+        }) => Effect.Effect<VerifiedAgentCard, import("../agent-card.js").AgentCardVerificationError>;
+    }>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["name_taken"]>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["key_already_registered"]>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["idempotency_conflict"]>;
+}>]>;
+/** Exact lookup response representation used by both HTTP adapters. */
+export declare const lookupResponseSchema: Schema.Union<[Schema.Struct<{
+    kind: Schema.Literal<["found"]>;
+    agentCard: Schema.Schema<AgentCard, unknown, never> & Readonly<{
+        readonly verify: (input: {
+            readonly agentCard: AgentCard;
+            readonly registrySignerPublicKey: Ed25519PublicKey;
+        }) => Effect.Effect<VerifiedAgentCard, import("../agent-card.js").AgentCardVerificationError>;
+    }>;
+}>, Schema.Struct<{
+    kind: Schema.Literal<["not_found"]>;
+}>]>;
+/** Exact list response representation used by both HTTP adapters. */
+export declare const listResponseSchema: Schema.Struct<{
+    kind: Schema.Literal<["page"]>;
+    agentCards: Schema.Array$<Schema.Schema<AgentCard, unknown, never> & Readonly<{
+        readonly verify: (input: {
+            readonly agentCard: AgentCard;
+            readonly registrySignerPublicKey: Ed25519PublicKey;
+        }) => Effect.Effect<VerifiedAgentCard, import("../agent-card.js").AgentCardVerificationError>;
+    }>>;
+    hasMore: typeof Schema.Boolean;
+}>;
+/** Exact bootstrap registration HTTP body. */
+export declare const registrationBody: Schema.Struct<{
+    request: Schema.Struct<{
+        operationId: Schema.brand<Schema.filter<typeof Schema.String>, "OperationId">;
+        principalId: Schema.brand<Schema.filter<typeof Schema.String>, "PrincipalId">;
+        agentName: Schema.brand<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>, "AgentName">;
+        publicKey: Schema.brand<Schema.transform<Schema.Struct<{
+            crv: Schema.Literal<["Ed25519"]>;
+            kty: Schema.Literal<["OKP"]>;
+            x: Schema.filter<typeof Schema.String>;
+        }>, Schema.declare<Readonly<{
+            crv: "Ed25519";
+            kty: "OKP";
+            x: string;
+        }>, Readonly<{
+            crv: "Ed25519";
+            kty: "OKP";
+            x: string;
+        }>, readonly [], never>>, "Ed25519PublicKey">;
+    }>;
+}>;
+/** Exact bootstrap registration request path. */
+export declare const REGISTER_PATH = "/v1/identities:register";
+/** Exact public lookup request path. */
+export declare const LOOKUP_PATH = "/v1/identities:lookup";
+/** Exact public list request path. */
+export declare const LIST_PATH = "/v1/identities:list";
+/** Exact Registry readiness path. */
+export declare const HEALTH_PATH = "/healthz";
+/** Effect Router patterns escape the literal colon in Registry paths. */
+export declare const REGISTER_ROUTE = "/v1/identities::register";
+/** Effect Router pattern for the literal lookup path. */
+export declare const LOOKUP_ROUTE = "/v1/identities::lookup";
+/** Effect Router pattern for the literal list path. */
+export declare const LIST_ROUTE = "/v1/identities::list";
+/** Exact paths used to classify method mismatches at the fallback route. */
+export declare const KNOWN_PATHS: Set<string>;
+/** Derived exact maximum bootstrap registration body size. */
+export declare const REGISTER_BODY_CAP: number;
+/** Derived exact maximum public lookup body size. */
+export declare const LOOKUP_BODY_CAP: number;
+/** Derived exact maximum public list body size. */
+export declare const LIST_BODY_CAP: number;
+export {};
+//# sourceMappingURL=contract.d.ts.map

package/dist/registry/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/registry/contract.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,OAAO,EAAQ,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EACL,SAAS,EACT,KAAK,iBAAiB,EAEvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQ/E,yDAAyD;AAEzD,eAAO,MAAM,WAAW,kEAAiD,CAAC;AAC1E,sDAAsD;AAEtD,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAC;;;;AAElD,gEAAgE;AAChE,qBAAa,uBAAwB,SAAQ,4BAE5C;CAAG;;;;AAEJ,8DAA8D;AAC9D,qBAAa,2BAA4B,SAAQ,gCAEhD;CAAG;;;;AAEJ,yEAAyE;AACzE,qBAAa,4BAA6B,SAAQ,iCAEjD;CAAG;AAUJ,sDAAsD;AAEtD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;EAKqB,CAAC;AAC1D,yDAAyD;AAEzD,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAC;AAE1E,uCAAuC;AAEvC,eAAO,MAAM,qBAAqB;;;;IAShC,CAAC;AACH,0CAA0C;AAE1C,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAC;AAEtE,iDAAiD;AAEjD,eAAO,MAAM,mBAAmB;;EAEqB,CAAC;AACtD,oDAAoD;AAEpD,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC;AAElE,qEAAqE;AACrE,MAAM,MAAM,sBAAsB,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAA;CAAE,CAAC,GAC9D,QAAQ,CAAC;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,GAChC,QAAQ,CAAC;IAAE,IAAI,EAAE,wBAAwB,CAAA;CAAE,CAAC,GAC5C,QAAQ,CAAC;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAAC;AAE/C,6DAA6D;AAC7D,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAA;CAAE,CAAC,GACzD,QAAQ,CAAC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEpC,+DAA+D;AAC/D,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACzC,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,OAAO,EAAE,uBAAuB,CAAC;IACjC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACvC,gBAAgB,EAAE,qBAAqB,CAAC;CACzC,CAAC,CAAC;AAEH,sDAAsD;AACtD,KAAK,mBAAmB,GACpB,uBAAuB,GACvB,2BAA2B,GAC3B,4BAA4B,CAAC;AAEjC,0DAA0D;AAC1D,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC3C,iBAAiB,EACjB;IAAE,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAA;CAAE,CAC/C,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAChB,sBAAsB,EACtB,iBAAiB,GAAG,mBAAmB,GAAG,iBAAiB,CAC5D,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,CACf,OAAO,EAAE,qBAAqB,KAC3B,MAAM,CAAC,MAAM,CAChB,oBAAoB,EACpB,uBAAuB,GAAG,mBAAmB,CAC9C,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,mBAAmB,KACzB,MAAM,CAAC,MAAM,CAChB,kBAAkB,EAClB,uBAAuB,GAAG,mBAAmB,CAC9C,CAAC;CACH;AAED,sDAAsD;AAEtD,eAAO,MAAM,oBAAoB;;;;;;;;;IAQhC,CAAC;AAEF,gDAAgD;AAEhD,eAAO,MAAM,kBAAkB;;;;;IAM9B,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB;;;;EAI3B,CAAC;AAEH,6EAA6E;AAE7E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;IAQlC,CAAC;AAEF,uEAAuE;AAEvE,eAAO,MAAM,oBAAoB;;;;;;;;;;IAMhC,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,kBAAkB;;;;;;;;;EAI7B,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;EAE3B,CAAC;AAEH,iDAAiD;AACjD,eAAO,MAAM,aAAa,4BAA4B,CAAC;AACvD,wCAAwC;AACxC,eAAO,MAAM,WAAW,0BAA0B,CAAC;AACnD,sCAAsC;AACtC,eAAO,MAAM,SAAS,wBAAwB,CAAC;AAC/C,qCAAqC;AACrC,eAAO,MAAM,WAAW,aAAa,CAAC;AAEtC,yEAAyE;AACzE,eAAO,MAAM,cAAc,6BAA6B,CAAC;AACzD,yDAAyD;AACzD,eAAO,MAAM,YAAY,2BAA2B,CAAC;AACrD,uDAAuD;AACvD,eAAO,MAAM,UAAU,yBAAyB,CAAC;AAEjD,4EAA4E;AAC5E,eAAO,MAAM,WAAW,aAKtB,CAAC;AAUH,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,QAW5B,CAAC;AAEH,qDAAqD;AACrD,eAAO,MAAM,eAAe,QAG3B,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,aAAa,QAExB,CAAC"}