@moltzap/identity 2026.902.0

package/dist/registry/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/registry/rpc.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EACL,GAAG,EACH,SAAS,EACT,QAAQ,EACR,aAAa,EAEd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,OAAO,EAEP,MAAM,EAEN,KAAK,EAEL,MAAM,EACP,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAU3B,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;;AAED,cAAM,yBAA0B,SAAQ,8BAEU;CAAG;;;;;AAErD,yEAAyE;AACzE,qBAAa,iBAAkB,SAAQ,sBAMtC;CAAG;AAMJ;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UACpC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAIb,CAAC;AAWZ,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,8CAGlC,CAAC;AAgDF,qEAAqE;AACrE,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kVAIvB,CAAC;AAEF,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAW/E,qEAAqE;AACrE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mIAce,CAAC;AA2BlD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,UAAW;IAClD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;CAC1D,qGAKG,CAAC"}

package/dist/registry/rpc.js

@@ -0,0 +1,85 @@
+/** @file Private admitted Registry operations and in-process RPC dispatch. */
+import { Rpc, RpcClient, RpcGroup, RpcMiddleware, RpcServer, } from "@effect/rpc";
+import { Context, Deferred, Effect, FiberRef, Layer, Option, Schema, } from "effect";
+import { encodeCanonicalJson } from "../canonical-json.js";
+import { AuthenticationFailedError, InternalServerError, MalformedRequestError, MethodNotAllowedError, OverloadedError, PayloadTooLargeError, RouteNotFoundError, UnavailableError, UnsupportedMediaTypeError, VersionMismatchError, } from "../http-errors.js";
+import { listResultSchema, lookupResultSchema, registerResultSchema, RegistryListRequest, RegistryLookupRequest, RegistryRegisterRequest, } from "./contract.js";
+class BootstrapAdmissionContext extends Context.Tag("@moltzap/identity/BootstrapAdmissionContext")() {
+}
+/** Required private RPC admission boundary for Registry registration. */
+export class RegistryAdmission extends RpcMiddleware.Tag()("@moltzap/identity/RegistryAdmission", {
+    provides: BootstrapAdmissionContext,
+    failure: AuthenticationFailedError,
+}) {
+}
+const currentAdmission = FiberRef.unsafeMake(Option.none());
+/**
+ * Runs private Registry dispatch with one already-verified admission proof.
+ *
+ * @param effect Private registration dispatch to admit.
+ * @returns The dispatch with its admission proof scoped to the current fiber.
+ */
+export const withBootstrapAdmission = (effect) => Effect.locally(currentAdmission, Option.some(Object.freeze({ admitted: true })))(effect);
+const readAdmission = FiberRef.get(currentAdmission).pipe(Effect.flatMap(Option.match({
+    onNone: () => Effect.fail(new AuthenticationFailedError()),
+    onSome: Effect.succeed,
+})));
+/** Layer installed only inside the Registry process's private RPC runtime. */
+export const registryAdmissionLayer = Layer.succeed(RegistryAdmission, () => readAdmission);
+const registerErrors = Schema.Union(MalformedRequestError, AuthenticationFailedError, RouteNotFoundError, MethodNotAllowedError, VersionMismatchError, PayloadTooLargeError, UnsupportedMediaTypeError, OverloadedError, UnavailableError, InternalServerError);
+const publicReadErrors = Schema.Union(MalformedRequestError, RouteNotFoundError, MethodNotAllowedError, VersionMismatchError, PayloadTooLargeError, UnsupportedMediaTypeError, OverloadedError, UnavailableError, InternalServerError);
+/** Private registration operation including its admission middleware. */
+const registerOperation = Rpc.make("register", {
+    payload: RegistryRegisterRequest,
+    success: registerResultSchema,
+    error: registerErrors,
+}).middleware(RegistryAdmission);
+/** Private lookup operation. */
+const lookupOperation = Rpc.make("lookup", {
+    payload: RegistryLookupRequest,
+    success: lookupResultSchema,
+    error: publicReadErrors,
+});
+/** Private deterministic list operation. */
+const listOperation = Rpc.make("list", {
+    payload: RegistryListRequest,
+    success: listResultSchema,
+    error: publicReadErrors,
+});
+/** The package-private no-serialization Registry operation group. */
+const registryOperations = RpcGroup.make(registerOperation, lookupOperation, listOperation);
+/** Connects the private Registry RPC client and server in memory. */
+export const makeRegistryRpcClient = Effect.gen(function* () {
+    const clientReady = yield* Deferred.make();
+    const server = yield* RpcServer.makeNoSerialization(registryOperations, {
+        onFromServer: (message) => Deferred.await(clientReady).pipe(Effect.flatMap((client) => client.write(message))),
+    });
+    const client = yield* RpcClient.makeNoSerialization(registryOperations, {
+        supportsAck: true,
+        onFromClient: ({ message }) => server.write(0, message),
+    });
+    yield* Deferred.succeed(clientReady, client);
+    return client.client;
+}).pipe(Effect.withSpan("makeRegistryRpcClient"));
+const canonicalRegisterRequest = (request) => Schema.encode(RegistryRegisterRequest)(request).pipe(Effect.flatMap(encodeCanonicalJson), 
+// eslint-disable-next-line agent-code-guard/no-effect-error-coalescing -- Private serialization failure has one closed domain error at the RPC boundary.
+Effect.mapError(() => new InternalServerError()));
+const registerHandler = (input) => (request) => canonicalRegisterRequest(request).pipe(Effect.flatMap((requestBytes) => input.storage.register({
+    request,
+    requestBytes,
+    registrySigningAuthority: input.registrySigningAuthority,
+})));
+/**
+ * Implements the three private operations over durable Registry storage.
+ *
+ * @param input Private RPC handler dependencies.
+ * @param input.storage Durable Registry operations.
+ * @param input.registrySigningAuthority Registry card issuer.
+ * @returns A layer implementing the complete private operation group.
+ */
+export const makeRegistryRpcHandlersLayer = (input) => registryOperations.toLayer({
+    register: registerHandler(input),
+    lookup: (request) => input.storage.lookup(request),
+    list: (request) => input.storage.list(request),
+});
+//# sourceMappingURL=rpc.js.map

package/dist/registry/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/registry/rpc.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EACL,GAAG,EACH,SAAS,EACT,QAAQ,EACR,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,MAAM,GACP,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAMvB,MAAM,yBAA0B,SAAQ,OAAO,CAAC,GAAG,CACjD,6CAA6C,CAC9C,EAAiD;CAAG;AAErD,yEAAyE;AACzE,MAAM,OAAO,iBAAkB,SAAQ,aAAa,CAAC,GAAG,EAAqB,CAC3E,qCAAqC,EACrC;IACE,QAAQ,EAAE,yBAAyB;IACnC,OAAO,EAAE,yBAAyB;CACnC,CACF;CAAG;AAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAC1C,MAAM,CAAC,IAAI,EAAE,CACd,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAA8B,EACN,EAAE,CAC1B,MAAM,CAAC,OAAO,CACZ,gBAAgB,EAChB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CACxD,CAAC,MAAM,CAAC,CAAC;AAEZ,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,KAAK,CAAC;IACX,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,yBAAyB,EAAE,CAAC;IAC1D,MAAM,EAAE,MAAM,CAAC,OAAO;CACvB,CAAC,CACH,CACF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,CACjD,iBAAiB,EACjB,GAAG,EAAE,CAAC,aAAa,CACpB,CAAC;AAEF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CACjC,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,CACpB,CAAC;AAEF,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CACnC,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,CACpB,CAAC;AAEF,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE;IAC7C,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,oBAAoB;IAC7B,KAAK,EAAE,cAAc;CACtB,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAEjC,gCAAgC;AAChC,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEH,4CAA4C;AAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;IACrC,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,gBAAgB;IACzB,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CACtC,iBAAiB,EACjB,eAAe,EACf,aAAa,CACd,CAAC;AAcF,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAyB,CAAC;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,kBAAkB,EAAE;QACtE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CACxB,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAClD;KACJ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,kBAAkB,EAAE;QACtE,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;KACxD,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAElD,MAAM,wBAAwB,GAAG,CAC/B,OAA4C,EAC5C,EAAE,CACF,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAClD,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;AACnC,yJAAyJ;AACzJ,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC,CACjD,CAAC;AAEJ,MAAM,eAAe,GACnB,CAAC,KAGA,EAAE,EAAE,CACL,CAAC,OAA4C,EAAE,EAAE,CAC/C,wBAAwB,CAAC,OAAO,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAC9B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;IACrB,OAAO;IACP,YAAY;IACZ,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;CACzD,CAAC,CACH,CACF,CAAC;AAEN;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,KAG5C,EAAE,EAAE,CACH,kBAAkB,CAAC,OAAO,CAAC;IACzB,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC;IAChC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;IAClD,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;CAC/C,CAAC,CAAC"}

package/dist/registry/server.d.ts

@@ -0,0 +1,52 @@
+/** @file Production Registry process configuration, composition, and startup boundary. */
+import { Cause, type ConfigError, Effect, Layer, Redacted } from "effect";
+/**
+ * Complete validated configuration for one Registry process.
+ *
+ * @internal
+ */
+export interface RegistryConfiguration {
+    readonly host: string;
+    readonly port: number;
+    readonly postgresqlUrl: Redacted.Redacted;
+    readonly admissionCredential: Redacted.Redacted;
+    readonly signingPrivateKeyPath: Redacted.Redacted;
+    readonly listPageSize: number;
+    readonly requestConcurrencyLimit: number;
+    readonly liveNonceCapacity: number;
+    readonly sqlPoolSize: number;
+    readonly sqlOperationTimeoutMs: number;
+}
+/**
+ * Loads the complete private Registry process configuration.
+ *
+ * @internal
+ */
+export declare const loadRegistryConfiguration: Effect.Effect<RegistryConfiguration, ConfigError.ConfigError>;
+declare const StartupError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => Cause.YieldableError & {
+    readonly _tag: "RegistryServerStartupError";
+} & Readonly<A>;
+/** Closed Registry startup failure. */
+export declare class StartupError extends StartupError_base<{
+    readonly phase: "configuration" | "storage" | "listener";
+}> {
+}
+/**
+ * Complete production Registry process composition.
+ *
+ * ```mermaid
+ * flowchart TD
+ *   Binary["moltzap-registry"] --> Server["runRegistryServer"]
+ *   Server --> Configuration["loadRegistryConfiguration"]
+ *   Server --> Storage["RegistryStorage"]
+ *   Server --> Http["makeRegistryHttpApp"]
+ *   Http --> Admission["verifyBootstrapRegistration"]
+ *   Http --> Rpc["RegistryRpcClient"]
+ *   Admission --> Storage
+ *   Rpc --> Storage
+ *   Http --> Response["HttpServerResponse"]
+ * ```
+ */
+export declare const layer: Layer.Layer<never, StartupError>;
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/registry/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/registry/server.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAM1F,OAAO,EACL,KAAK,EAEL,KAAK,WAAW,EAGhB,MAAM,EACN,KAAK,EACL,QAAQ,EAET,MAAM,QAAQ,CAAC;AA6FhB;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,CACnD,qBAAqB,EACrB,WAAW,CAAC,WAAW,CAIxB,CAAC;;;;AAEF,uCAAuC;AACvC,qBAAa,YAAa,SAAQ,kBAEhC;IACA,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,UAAU,CAAC;CAC1D,CAAC;CAAG;AAmBL;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAElD,CAAC"}

package/dist/registry/server.js

@@ -0,0 +1,157 @@
+/** @file Production Registry process configuration, composition, and startup boundary. */
+import * as Reactivity from "@effect/experimental/Reactivity";
+import { FileSystem, HttpServer, HttpServerResponse } from "@effect/platform";
+import { NodeContext, NodeHttpServer } from "@effect/platform-node";
+import { PgClient } from "@effect/sql-pg";
+import { Cause, Config, Data, Duration, Effect, Layer, Redacted, Schema, } from "effect";
+// eslint-disable-next-line agent-code-guard/prefer-effect-platform -- NodeHttpServer.make requires the platform listener constructor at this adapter boundary.
+import { createServer } from "node:http";
+import { isAbsolute } from "node:path";
+import { AgentSigningAuthority } from "../agent-key.js";
+import { makeRegistryHttpApp } from "./http.js";
+import { makeRegistryRpcClient, makeRegistryRpcHandlersLayer, registryAdmissionLayer, } from "./rpc.js";
+import { initializeRegistryStorage, makeRegistryStorage, } from "./storage.js";
+const MAXIMUM_PROCESS_INTEGER = 2_147_483_647;
+const canonicalUnsignedDecimal = Schema.String.pipe(Schema.pattern(/^(?:0|[1-9]\d*)$/));
+const processInteger = canonicalUnsignedDecimal.pipe(Schema.compose(Schema.NumberFromString), Schema.int(), Schema.between(1, MAXIMUM_PROCESS_INTEGER));
+const port = canonicalUnsignedDecimal.pipe(Schema.compose(Schema.NumberFromString), Schema.int(), Schema.between(1, 65_535));
+const bindHost = Schema.String.pipe(Schema.minLength(1));
+const postgresqlUrl = Schema.String.pipe(Schema.filter((value) => {
+    try {
+        const parsed = new URL(value);
+        return ((parsed.protocol === "postgres:" ||
+            parsed.protocol === "postgresql:") &&
+            parsed.pathname.length > 1 &&
+            parsed.hash === "");
+        // eslint-disable-next-line agent-code-guard/bare-catch -- URL parsing failure is the false branch of this Schema predicate. #ignore-sloppy-code-next-line[bare-catch]: The predicate returns false.
+    }
+    catch {
+        return false;
+    }
+}));
+const admissionCredential = Schema.String.pipe(Schema.minLength(8), Schema.maxLength(512), Schema.pattern(/^[A-Za-z0-9\-._~+/]+=*$/));
+const absolutePath = Schema.String.pipe(Schema.filter((value) => isAbsolute(value)));
+const configuredValues = Config.all({
+    host: Schema.Config("MOLTZAP_REGISTRY_HOST", bindHost).pipe(Config.withDefault("127.0.0.1")),
+    port: Schema.Config("MOLTZAP_REGISTRY_PORT", port),
+    postgresqlUrl: Config.redacted(Schema.Config("MOLTZAP_REGISTRY_POSTGRESQL_URL", postgresqlUrl)),
+    admissionCredential: Config.redacted(Schema.Config("MOLTZAP_REGISTRY_ADMISSION_CREDENTIAL", admissionCredential)),
+    signingPrivateKeyPath: Config.redacted(Schema.Config("MOLTZAP_REGISTRY_SIGNING_PRIVATE_KEY_PATH", absolutePath)),
+    listPageSize: Schema.Config("MOLTZAP_REGISTRY_LIST_PAGE_SIZE", processInteger).pipe(Config.withDefault(100)),
+    requestConcurrencyLimit: Schema.Config("MOLTZAP_REGISTRY_REQUEST_CONCURRENCY_LIMIT", processInteger).pipe(Config.withDefault(256)),
+    liveNonceCapacity: Schema.Config("MOLTZAP_REGISTRY_LIVE_NONCE_CAPACITY", processInteger).pipe(Config.withDefault(10_000)),
+    sqlPoolSize: Schema.Config("MOLTZAP_REGISTRY_SQL_POOL_SIZE", processInteger).pipe(Config.withDefault(10)),
+    sqlOperationTimeoutMs: Schema.Config("MOLTZAP_REGISTRY_SQL_OPERATION_TIMEOUT_MS", processInteger).pipe(Config.withDefault(5_000)),
+});
+/**
+ * Loads the complete private Registry process configuration.
+ *
+ * @internal
+ */
+export const loadRegistryConfiguration = configuredValues.pipe(Effect.map((configuration) => configuration), Effect.withSpan("loadRegistryConfiguration"));
+/** Closed Registry startup failure. */
+export class StartupError extends Data.TaggedError("RegistryServerStartupError") {
+}
+const runRegistryServer = Effect.gen(function* () {
+    const configuration = yield* loadRegistryConfiguration.pipe(Effect.mapError(configurationFailure));
+    const registrySigningAuthority = yield* loadSigningAuthority(configuration);
+    const registrySignerPublicKey = AgentSigningAuthority.publicKey(registrySigningAuthority);
+    const storage = yield* connectStorage(configuration, registrySignerPublicKey);
+    const app = yield* buildRegistryApp({
+        configuration,
+        storage,
+        registrySigningAuthority,
+    });
+    yield* serveRegistry(configuration, guardRegistryApp(app));
+});
+/**
+ * Complete production Registry process composition.
+ *
+ * ```mermaid
+ * flowchart TD
+ *   Binary["moltzap-registry"] --> Server["runRegistryServer"]
+ *   Server --> Configuration["loadRegistryConfiguration"]
+ *   Server --> Storage["RegistryStorage"]
+ *   Server --> Http["makeRegistryHttpApp"]
+ *   Http --> Admission["verifyBootstrapRegistration"]
+ *   Http --> Rpc["RegistryRpcClient"]
+ *   Admission --> Storage
+ *   Rpc --> Storage
+ *   Http --> Response["HttpServerResponse"]
+ * ```
+ */
+// safer-arch-ignore require-boundary-owned-types: The declared Layer type is the public boundary; this composition root provides the Node adapter internally.
+export const layer = Layer.scopedDiscard(runRegistryServer.pipe(Effect.provide(NodeContext.layer)));
+function loadSigningAuthority(configuration) {
+    return Effect.gen(function* () {
+        const fileSystem = yield* FileSystem.FileSystem;
+        const privateKeyText = yield* fileSystem
+            .readFileString(Redacted.value(configuration.signingPrivateKeyPath))
+            .pipe(Effect.mapError(configurationFailure));
+        return yield* AgentSigningAuthority.fromPkcs8(Redacted.make(privateKeyText)).pipe(Effect.mapError(configurationFailure));
+    });
+}
+function connectStorage(configuration, registrySignerPublicKey) {
+    return Effect.gen(function* () {
+        const sql = yield* PgClient.make({
+            url: configuration.postgresqlUrl,
+            maxConnections: configuration.sqlPoolSize,
+            connectTimeout: Duration.millis(configuration.sqlOperationTimeoutMs),
+            applicationName: "moltzap-registry",
+        }).pipe(Effect.provide(Reactivity.layer), Effect.mapError(storageFailure));
+        yield* initializeRegistryStorage({
+            sql,
+            registrySignerPublicKey,
+        }).pipe(Effect.mapError(storageFailure), Effect.timeoutFail({
+            duration: Duration.millis(configuration.sqlOperationTimeoutMs),
+            onTimeout: storageFailure,
+        }));
+        return makeRegistryStorage({
+            sql,
+            registrySignerPublicKey,
+            listPageSize: configuration.listPageSize,
+            operationTimeoutMilliseconds: configuration.sqlOperationTimeoutMs,
+        });
+    });
+}
+function buildRegistryApp(input) {
+    return Effect.gen(function* () {
+        const handlers = makeRegistryRpcHandlersLayer({
+            storage: input.storage,
+            registrySigningAuthority: input.registrySigningAuthority,
+        });
+        const client = yield* makeRegistryRpcClient.pipe(Effect.provide(handlers), Effect.provide(registryAdmissionLayer));
+        const requestSemaphore = yield* Effect.makeSemaphore(input.configuration.requestConcurrencyLimit);
+        return makeRegistryHttpApp({
+            client,
+            storage: input.storage,
+            admissionCredential: input.configuration.admissionCredential,
+            nonceCapacity: input.configuration.liveNonceCapacity,
+            requestSemaphore,
+        });
+    });
+}
+function guardRegistryApp(app) {
+    return app.pipe(Effect.catchAllCause((cause) => Effect.logError("Registry HTTP application failed", Cause.squash(cause)).pipe(Effect.as(HttpServerResponse.empty({ status: 500 })))));
+}
+function serveRegistry(configuration, app) {
+    return Effect.gen(function* () {
+        const httpServer = yield* NodeHttpServer.make(createServer, {
+            host: configuration.host,
+            port: configuration.port,
+        }).pipe(Effect.mapError(listenerFailure));
+        yield* HttpServer.serveEffect(app).pipe(
+        // The server capability owns listener acquisition and release.
+        Effect.provideService(HttpServer.HttpServer, httpServer));
+    });
+}
+function configurationFailure() {
+    return new StartupError({ phase: "configuration" });
+}
+function storageFailure() {
+    return new StartupError({ phase: "storage" });
+}
+function listenerFailure() {
+    return new StartupError({ phase: "listener" });
+}
+//# sourceMappingURL=server.js.map

package/dist/registry/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/registry/server.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,KAAK,EACL,MAAM,EAEN,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,KAAK,EACL,QAAQ,EACR,MAAM,GACP,MAAM,QAAQ,CAAC;AAChB,+JAA+J;AAC/J,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GAEpB,MAAM,cAAc,CAAC;AAEtB,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACjD,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CACnC,CAAC;AACF,MAAM,cAAc,GAAG,wBAAwB,CAAC,IAAI,CAClD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EACvC,MAAM,CAAC,GAAG,EAAE,EACZ,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAC3C,CAAC;AACF,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EACvC,MAAM,CAAC,GAAG,EAAE,EACZ,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAC1B,CAAC;AACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACtC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,CACL,CAAC,MAAM,CAAC,QAAQ,KAAK,WAAW;YAC9B,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,MAAM,CAAC,IAAI,KAAK,EAAE,CACnB,CAAC;QACF,oMAAoM;IACtM,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EACnB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAC1C,CAAC;AACF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACrC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAC5C,CAAC;AAEF,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAChC;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC;IAClD,aAAa,EAAE,MAAM,CAAC,QAAQ,CAC5B,MAAM,CAAC,MAAM,CAAC,iCAAiC,EAAE,aAAa,CAAC,CAChE;IACD,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAClC,MAAM,CAAC,MAAM,CAAC,uCAAuC,EAAE,mBAAmB,CAAC,CAC5E;IACD,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CACpC,MAAM,CAAC,MAAM,CAAC,2CAA2C,EAAE,YAAY,CAAC,CACzE;IACD,YAAY,EAAE,MAAM,CAAC,MAAM,CACzB,iCAAiC,EACjC,cAAc,CACf,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,uBAAuB,EAAE,MAAM,CAAC,MAAM,CACpC,4CAA4C,EAC5C,cAAc,CACf,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAC9B,sCAAsC,EACtC,cAAc,CACf,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC,MAAM,CACxB,gCAAgC,EAChC,cAAc,CACf,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAClC,2CAA2C,EAC3C,cAAc,CACf,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;CAClC,CAAC,CAAC;AAoBH;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAGlC,gBAAgB,CAAC,IAAI,CACvB,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,EAAyB,EAAE,CAAC,aAAa,CAAC,EACnE,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAC7C,CAAC;AAEF,uCAAuC;AACvC,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAChD,4BAA4B,CAG5B;CAAG;AAEL,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,IAAI,CACzD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CACtC,CAAC;IACF,MAAM,wBAAwB,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAC5E,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,SAAS,CAC7D,wBAAwB,CACzB,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;QAClC,aAAa;QACb,OAAO;QACP,wBAAwB;KACzB,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,aAAa,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,8JAA8J;AAC9J,MAAM,CAAC,MAAM,KAAK,GAAqC,KAAK,CAAC,aAAa,CACxE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;AAEF,SAAS,oBAAoB,CAAC,aAAoC;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAChD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,UAAU;aACrC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;aACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAC3C,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAC9B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACrB,aAAoC,EACpC,uBAA2E;IAE3E,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC/B,GAAG,EAAE,aAAa,CAAC,aAAa;YAChC,cAAc,EAAE,aAAa,CAAC,WAAW;YACzC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC;YACpE,eAAe,EAAE,kBAAkB;SACpC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,CAAC,yBAAyB,CAAC;YAC/B,GAAG;YACH,uBAAuB;SACxB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC/B,MAAM,CAAC,WAAW,CAAC;YACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC;YAC9D,SAAS,EAAE,cAAc;SAC1B,CAAC,CACH,CAAC;QACF,OAAO,mBAAmB,CAAC;YACzB,GAAG;YACH,uBAAuB;YACvB,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,4BAA4B,EAAE,aAAa,CAAC,qBAAqB;SAClE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAIzB;IACC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,QAAQ,GAAG,4BAA4B,CAAC;YAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;SACzD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAC9C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxB,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CACvC,CAAC;QACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAClD,KAAK,CAAC,aAAa,CAAC,uBAAuB,CAC5C,CAAC;QACF,OAAO,mBAAmB,CAAC;YACzB,MAAM;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,mBAAmB;YAC5D,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,iBAAiB;YACpD,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA2C;IACnE,OAAO,GAAG,CAAC,IAAI,CACb,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,QAAQ,CACb,kCAAkC,EAClC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CACpB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAC7D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,aAAoC,EACpC,GAAwC;IAExC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE;YAC1D,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,IAAI,EAAE,aAAa,CAAC,IAAI;SACzB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI;QACrC,+DAA+D;QAC/D,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/dist/registry/storage.d.ts

@@ -0,0 +1,62 @@
+/** @file Durable Registry persistence for admission, immutable cards, and idempotent operations. */
+import { SqlClient } from "@effect/sql/SqlClient";
+import { Effect } from "effect";
+import { type AgentSigningAuthority, type Ed25519PublicKey } from "../agent-key.js";
+import { InternalServerError, UnavailableError } from "../http-errors.js";
+import { type RegistryListRequest, type RegistryListResult, type RegistryLookupRequest, type RegistryLookupResult, type RegistryRegisterRequest, type RegistryRegisterResult } from "./contract.js";
+declare const RegistryStorageInitializationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RegistryStorageInitializationError";
+} & Readonly<A>;
+/** Storage initialization failed before the Registry became ready. */
+export declare class RegistryStorageInitializationError extends RegistryStorageInitializationError_base {
+}
+type StorageError = UnavailableError | InternalServerError;
+type StorageInput = Readonly<{
+    sql: SqlClient;
+    registrySignerPublicKey: Ed25519PublicKey;
+    listPageSize: number;
+    operationTimeoutMilliseconds: number;
+}>;
+type RegisterInput = Readonly<{
+    request: RegistryRegisterRequest;
+    requestBytes: Uint8Array;
+    registrySigningAuthority: AgentSigningAuthority;
+}>;
+/** Durable operations needed by Registry admission and request handling. */
+export interface RegistryStorage {
+    readonly checkReadiness: () => Effect.Effect<void, StorageError>;
+    readonly claimRegistrationNonce: (input: {
+        readonly nonce: string;
+        readonly expires: number;
+        readonly now: number;
+        readonly capacity: number;
+    }) => Effect.Effect<"claimed" | "replayed" | "full", StorageError>;
+    readonly register: (input: RegisterInput) => Effect.Effect<RegistryRegisterResult, StorageError>;
+    readonly lookup: (request: RegistryLookupRequest) => Effect.Effect<RegistryLookupResult, StorageError>;
+    readonly list: (request: RegistryListRequest) => Effect.Effect<RegistryListResult, StorageError>;
+}
+/**
+ * Runs migrations and binds the configured signer and version to storage.
+ *
+ * @param input Initialization dependencies.
+ * @param input.sql Exclusive SQL capability for this Registry process.
+ * @param input.registrySignerPublicKey Pinned Registry verification key.
+ * @returns An effect that completes only after storage is ready.
+ */
+export declare function initializeRegistryStorage(input: {
+    readonly sql: SqlClient;
+    readonly registrySignerPublicKey: Ed25519PublicKey;
+}): Effect.Effect<void, RegistryStorageInitializationError>;
+/**
+ * Creates durable Registry operations over one initialized SQL client.
+ *
+ * @param input Storage dependencies and operation bounds.
+ * @param input.sql Initialized SQL capability.
+ * @param input.registrySignerPublicKey Pinned Registry verification key.
+ * @param input.listPageSize Maximum complete cards in one list response.
+ * @param input.operationTimeoutMilliseconds Complete SQL operation deadline.
+ * @returns Durable Registry operations.
+ */
+export declare function makeRegistryStorage(input: StorageInput): RegistryStorage;
+export {};
+//# sourceMappingURL=storage.d.ts.map

package/dist/registry/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/registry/storage.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAIpG,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAe,MAAM,EAA4B,MAAM,QAAQ,CAAC;AASvE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAEtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;;;;AAGvB,sEAAsE;AACtE,qBAAa,kCAAmC,SAAQ,uCAEvD;CAAG;AAEJ,KAAK,YAAY,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAC3D,KAAK,YAAY,GAAG,QAAQ,CAAC;IAC3B,GAAG,EAAE,SAAS,CAAC;IACf,uBAAuB,EAAE,gBAAgB,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,4BAA4B,EAAE,MAAM,CAAC;CACtC,CAAC,CAAC;AACH,KAAK,aAAa,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,uBAAuB,CAAC;IACjC,YAAY,EAAE,UAAU,CAAC;IACzB,wBAAwB,EAAE,qBAAqB,CAAC;CACjD,CAAC,CAAC;AAMH,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjE,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE;QACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,UAAU,GAAG,MAAM,EAAE,YAAY,CAAC,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,aAAa,KACjB,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,CACf,OAAO,EAAE,qBAAqB,KAC3B,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,mBAAmB,KACzB,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;CACtD;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,uBAAuB,EAAE,gBAAgB,CAAC;CACpD,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAS1D;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,eAAe,CAQxE"}