@nifrajs/agent 2.14.1 → 3.2.0

package/dist/registry.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Unified capability descriptor registry.
+ *
+ * A {@link CapabilityDescriptor} is the content-free identity card of one invokable capability - a
+ * core tool, an MCP tool, a coding-agent extension, a model adapter, or a deployment adapter. It
+ * carries a stable name, a version, a kind, a schema digest, the capabilities it requires, and the
+ * host-policy classes (approval, retry, idempotency, isolation) the host uses to admit it. It never
+ * carries a description, an input or output payload, a prompt, or any other content: the digest is
+ * taken over the input JSON schema, so two producers of the same capability agree on identity
+ * without either exposing a request body.
+ *
+ * A {@link RegistrySnapshot} composes many descriptors into a deterministic, collision-checked set
+ * with a single snapshot digest. Canonical ordering makes the digest independent of input order, so
+ * reordering declarations can never change it. Every failure raises a {@link RegistryError} with a
+ * stable {@link RegistryErrorCode}; nothing here throws a message that could carry content.
+ *
+ * The package depends only on `@nifrajs/core`. The MCP and coding-agent adapters live in their own
+ * packages and consume these contracts through the declared `@nifrajs/agent` edge - never the
+ * reverse - so neither this package nor the protocol ever imports MCP transport or the coding agent.
+ */
+import type { ToolContract } from "@nifrajs/core/tool-contract";
+export declare const CAPABILITY_DESCRIPTOR_VERSION: 1;
+export declare const REGISTRY_SNAPSHOT_VERSION: 1;
+/** Producer families a descriptor can describe. A value outside this set fails `unsupported_kind`. */
+export type CapabilityKind = "tool" | "mcp-tool" | "extension" | "model-adapter" | "deployment-adapter";
+/** Host approval requirement. Mirrors the core tool approval policy; a numeric level is not content. */
+export type ApprovalClass = {
+    readonly kind: "none";
+} | {
+    readonly kind: "required";
+} | {
+    readonly kind: "threshold";
+    readonly level: number;
+};
+/** Whether a failed invocation may be retried. A capability is retry-eligible only when idempotent. */
+export type RetryClass = "none" | "idempotent";
+/** Idempotency guarantee a capability declares, mirroring the tool idempotency scope. */
+export type IdempotencyClass = "none" | "request" | "durable";
+/** Isolation the host must provide to invoke the capability. */
+export type IsolationClass = "inherit" | "process" | "sandbox";
+export interface CapabilityDescriptor {
+    readonly descriptorVersion: typeof CAPABILITY_DESCRIPTOR_VERSION;
+    readonly kind: CapabilityKind;
+    readonly name: string;
+    readonly version: string;
+    /** SHA-256 hex over the canonical input JSON schema. Identity without exposing a request body. */
+    readonly schemaDigest: string;
+    readonly requiredCapabilities: readonly string[];
+    readonly approval: ApprovalClass;
+    readonly retry: RetryClass;
+    readonly idempotency: IdempotencyClass;
+    readonly isolation: IsolationClass;
+}
+export interface RegistrySnapshot {
+    readonly version: typeof REGISTRY_SNAPSHOT_VERSION;
+    /** SHA-256 hex over the canonically ordered descriptor set. Independent of input order. */
+    readonly digest: string;
+    readonly descriptors: readonly CapabilityDescriptor[];
+}
+export type RegistryErrorCode = "invalid_descriptor" | "unsupported_kind" | "missing_version" | "invalid_name" | "invalid_capability" | "content_field" | "invalid_schema_digest" | "invalid_approval" | "descriptor_collision" | "schema_drift" | "capability_escalation";
+/** A stable, content-free failure. `code` is the machine-addressable reason; the message is generic. */
+export declare class RegistryError extends Error {
+    readonly code: RegistryErrorCode;
+    constructor(code: RegistryErrorCode, message?: RegistryErrorCode);
+}
+/**
+ * Validate an untrusted value as a {@link CapabilityDescriptor}, normalizing capability order. Missing,
+ * unknown, or content-bearing fields are rejected with a stable code. This is the single admission
+ * point: every adapter output and every wire value passes through it before it enters a snapshot.
+ */
+export declare function parseCapabilityDescriptor(value: unknown): CapabilityDescriptor;
+/** The fields an adapter supplies. The schema digest is derived from `inputSchema`, never passed in. */
+export interface DescriptorInput {
+    readonly kind: CapabilityKind;
+    readonly name: string;
+    readonly version?: string;
+    /** The capability's input JSON schema. Digested for identity; the schema itself is not stored. */
+    readonly inputSchema: Record<string, unknown>;
+    readonly requiredCapabilities?: readonly string[];
+    readonly approval?: ApprovalClass;
+    readonly retry?: RetryClass;
+    readonly idempotency?: IdempotencyClass;
+    readonly isolation?: IsolationClass;
+}
+/**
+ * Build a validated descriptor from adapter fields, digesting the input schema. Two adapters that
+ * describe the same capability (same kind, name, version, schema, and classes) produce byte-identical
+ * descriptors and therefore the same digest, which is what makes cross-package parity checkable.
+ */
+export declare function composeDescriptor(input: DescriptorInput): Promise<CapabilityDescriptor>;
+export interface ToolDescriptorOptions {
+    /** Kind to record. Defaults to `tool`; the MCP adapter passes `mcp-tool` for the same contract. */
+    readonly kind?: CapabilityKind;
+    readonly version?: string;
+    readonly isolation?: IsolationClass;
+}
+/**
+ * Adapt a Nifra core {@link ToolContract} into a descriptor without touching its execution contract.
+ * The schema digest is taken over the tool's own input JSON schema, retry follows idempotency, and
+ * the approval policy is carried through unchanged, so the descriptor is a faithful, content-free
+ * projection of the contract the runtime already enforces.
+ */
+export declare function descriptorFromTool<Input, Output>(tool: ToolContract<Input, Output>, options?: ToolDescriptorOptions): Promise<CapabilityDescriptor>;
+/**
+ * Compose a deterministic registry snapshot. Descriptors are validated, checked for identity
+ * collisions, canonically ordered, and digested. Two descriptors that share a (kind, name) identity
+ * fail `descriptor_collision` when their schema digests agree and `schema_drift` when they differ -
+ * a drifted schema is a distinct, addressable failure from a duplicate registration. Because the set
+ * is sorted before it is digested, the snapshot digest is independent of the input order.
+ */
+export declare function composeRegistrySnapshot(descriptors: readonly CapabilityDescriptor[]): Promise<RegistrySnapshot>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAG/D,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAA;AACvD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAA;AAEnD,sGAAsG;AACtG,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,UAAU,GACV,WAAW,GACX,eAAe,GACf,oBAAoB,CAAA;AAUxB,wGAAwG;AACxG,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1D,uGAAuG;AACvG,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,YAAY,CAAA;AAG9C,yFAAyF;AACzF,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;AAO7D,gEAAgE;AAChE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;AAO9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,6BAA6B,CAAA;IAChE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAA;IAChD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,yBAAyB,CAAA;IAClD,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAA;CACtD;AAED,MAAM,MAAM,iBAAiB,GACzB,oBAAoB,GACpB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,oBAAoB,GACpB,eAAe,GACf,uBAAuB,GACvB,kBAAkB,GAClB,sBAAsB,GACtB,cAAc,GACd,uBAAuB,CAAA;AAE3B,wGAAwG;AACxG,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;gBAEpB,IAAI,EAAE,iBAAiB,EAAE,OAAO,oBAAO;CAKpD;AA6ID;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAqC9E;AAED,wGAAwG;AACxG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,kGAAkG;IAClG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAA;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;CACpC;AAID;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiC7F;AAED,MAAM,WAAW,qBAAqB;IACpC,mGAAmG;IACnG,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAC9C,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EACjC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAY/B;AA4BD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,SAAS,oBAAoB,EAAE,GAC3C,OAAO,CAAC,gBAAgB,CAAC,CAyB3B"}

package/dist/registry.js

@@ -0,0 +1,326 @@
+/**
+ * Unified capability descriptor registry.
+ *
+ * A {@link CapabilityDescriptor} is the content-free identity card of one invokable capability - a
+ * core tool, an MCP tool, a coding-agent extension, a model adapter, or a deployment adapter. It
+ * carries a stable name, a version, a kind, a schema digest, the capabilities it requires, and the
+ * host-policy classes (approval, retry, idempotency, isolation) the host uses to admit it. It never
+ * carries a description, an input or output payload, a prompt, or any other content: the digest is
+ * taken over the input JSON schema, so two producers of the same capability agree on identity
+ * without either exposing a request body.
+ *
+ * A {@link RegistrySnapshot} composes many descriptors into a deterministic, collision-checked set
+ * with a single snapshot digest. Canonical ordering makes the digest independent of input order, so
+ * reordering declarations can never change it. Every failure raises a {@link RegistryError} with a
+ * stable {@link RegistryErrorCode}; nothing here throws a message that could carry content.
+ *
+ * The package depends only on `@nifrajs/core`. The MCP and coding-agent adapters live in their own
+ * packages and consume these contracts through the declared `@nifrajs/agent` edge - never the
+ * reverse - so neither this package nor the protocol ever imports MCP transport or the coding agent.
+ */
+import { toolInputJsonSchema } from "@nifrajs/core/tool-contract";
+export const CAPABILITY_DESCRIPTOR_VERSION = 1;
+export const REGISTRY_SNAPSHOT_VERSION = 1;
+const CAPABILITY_KINDS = new Set([
+    "tool",
+    "mcp-tool",
+    "extension",
+    "model-adapter",
+    "deployment-adapter",
+]);
+const RETRY_CLASSES = new Set(["none", "idempotent"]);
+const IDEMPOTENCY_CLASSES = new Set([
+    "none",
+    "request",
+    "durable",
+]);
+const ISOLATION_CLASSES = new Set([
+    "inherit",
+    "process",
+    "sandbox",
+]);
+/** A stable, content-free failure. `code` is the machine-addressable reason; the message is generic. */
+export class RegistryError extends Error {
+    code;
+    constructor(code, message = code) {
+        super(message);
+        this.code = code;
+        this.name = "RegistryError";
+    }
+}
+const NAME_TOKEN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+const CAPABILITY_TOKEN = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/;
+const VERSION_TOKEN = /^[A-Za-z0-9][A-Za-z0-9._:+-]{0,63}$/;
+const SCHEMA_DIGEST = /^[0-9a-f]{64}$/;
+const DESCRIPTOR_KEYS = new Set([
+    "descriptorVersion",
+    "kind",
+    "name",
+    "version",
+    "schemaDigest",
+    "requiredCapabilities",
+    "approval",
+    "retry",
+    "idempotency",
+    "isolation",
+]);
+/**
+ * Keys that would carry content or a payload. Their mere presence on a descriptor object is a
+ * boundary violation and fails `content_field`, distinct from an unknown structural field.
+ */
+const CONTENT_KEYS = new Set([
+    "description",
+    "instruction",
+    "input",
+    "output",
+    "inputSchema",
+    "outputSchema",
+    "content",
+    "prompt",
+    "text",
+    "message",
+    "arguments",
+    "args",
+    "params",
+    "parameters",
+    "result",
+    "payload",
+    "body",
+    "data",
+]);
+const encoder = new TextEncoder();
+/** SHA-256 hex of a UTF-8 string. Collision-resistant, so a digest cannot be forged from content. */
+async function sha256HexOf(text) {
+    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(text));
+    const view = new Uint8Array(digest);
+    let hex = "";
+    for (let i = 0; i < view.length; i++)
+        hex += view[i].toString(16).padStart(2, "0");
+    return hex;
+}
+/** Deterministic JSON with recursively sorted object keys. Arrays keep order; non-finite rejected. */
+function canonicalJson(value) {
+    if (value === null || typeof value === "boolean" || typeof value === "string")
+        return JSON.stringify(value);
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new TypeError("non-finite JSON number");
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (typeof value === "object") {
+        const record = value;
+        const keys = Object.keys(record)
+            .filter((key) => record[key] !== undefined)
+            .sort();
+        return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(",")}}`;
+    }
+    throw new TypeError(`cannot canonicalize ${typeof value}`);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseKind(value) {
+    if (typeof value !== "string" || !CAPABILITY_KINDS.has(value))
+        throw new RegistryError("unsupported_kind");
+    return value;
+}
+function parseName(value) {
+    if (typeof value !== "string" || !NAME_TOKEN.test(value))
+        throw new RegistryError("invalid_name");
+    return value;
+}
+function parseVersion(value) {
+    if (typeof value !== "string" || value.length === 0)
+        throw new RegistryError("missing_version");
+    if (!VERSION_TOKEN.test(value))
+        throw new RegistryError("missing_version");
+    return value;
+}
+function parseRequiredCapabilities(value) {
+    if (value === undefined)
+        return Object.freeze([]);
+    if (!Array.isArray(value))
+        throw new RegistryError("invalid_capability");
+    const seen = new Set();
+    for (const entry of value) {
+        if (typeof entry !== "string" || !CAPABILITY_TOKEN.test(entry))
+            throw new RegistryError("invalid_capability");
+        seen.add(entry);
+    }
+    return Object.freeze([...seen].sort());
+}
+function parseApproval(value) {
+    if (value === undefined)
+        return { kind: "none" };
+    if (!isRecord(value))
+        throw new RegistryError("invalid_approval");
+    if (value.kind === "none")
+        return { kind: "none" };
+    if (value.kind === "required")
+        return { kind: "required" };
+    if (value.kind === "threshold") {
+        const level = value.level;
+        if (typeof level !== "number" || !Number.isInteger(level) || level < 0)
+            throw new RegistryError("invalid_approval");
+        return { kind: "threshold", level };
+    }
+    throw new RegistryError("invalid_approval");
+}
+function parseMember(value, members, fallback, code) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "string" || !members.has(value))
+        throw new RegistryError(code);
+    return value;
+}
+function assertNoContentFields(record) {
+    for (const key of Object.keys(record)) {
+        if (DESCRIPTOR_KEYS.has(key))
+            continue;
+        if (CONTENT_KEYS.has(key))
+            throw new RegistryError("content_field");
+        throw new RegistryError("invalid_descriptor");
+    }
+}
+/**
+ * Validate an untrusted value as a {@link CapabilityDescriptor}, normalizing capability order. Missing,
+ * unknown, or content-bearing fields are rejected with a stable code. This is the single admission
+ * point: every adapter output and every wire value passes through it before it enters a snapshot.
+ */
+export function parseCapabilityDescriptor(value) {
+    if (!isRecord(value))
+        throw new RegistryError("invalid_descriptor");
+    assertNoContentFields(value);
+    if (value.descriptorVersion !== CAPABILITY_DESCRIPTOR_VERSION)
+        throw new RegistryError("invalid_descriptor");
+    const kind = parseKind(value.kind);
+    const name = parseName(value.name);
+    const version = parseVersion(value.version);
+    if (typeof value.schemaDigest !== "string" || !SCHEMA_DIGEST.test(value.schemaDigest))
+        throw new RegistryError("invalid_schema_digest");
+    const requiredCapabilities = parseRequiredCapabilities(value.requiredCapabilities);
+    const approval = parseApproval(value.approval);
+    const retry = parseMember(value.retry, RETRY_CLASSES, "none", "invalid_descriptor");
+    const idempotency = parseMember(value.idempotency, IDEMPOTENCY_CLASSES, "none", "invalid_descriptor");
+    const isolation = parseMember(value.isolation, ISOLATION_CLASSES, "inherit", "invalid_descriptor");
+    return Object.freeze({
+        descriptorVersion: CAPABILITY_DESCRIPTOR_VERSION,
+        kind,
+        name,
+        version,
+        schemaDigest: value.schemaDigest,
+        requiredCapabilities,
+        approval: Object.freeze(approval),
+        retry,
+        idempotency,
+        isolation,
+    });
+}
+const DEFAULT_DESCRIPTOR_VERSION = "1.0.0";
+/**
+ * Build a validated descriptor from adapter fields, digesting the input schema. Two adapters that
+ * describe the same capability (same kind, name, version, schema, and classes) produce byte-identical
+ * descriptors and therefore the same digest, which is what makes cross-package parity checkable.
+ */
+export async function composeDescriptor(input) {
+    const kind = parseKind(input.kind);
+    const name = parseName(input.name);
+    const version = parseVersion(input.version ?? DEFAULT_DESCRIPTOR_VERSION);
+    if (!isRecord(input.inputSchema))
+        throw new RegistryError("invalid_descriptor");
+    const schemaDigest = await sha256HexOf(canonicalJson(input.inputSchema));
+    const requiredCapabilities = parseRequiredCapabilities(input.requiredCapabilities);
+    const approval = parseApproval(input.approval);
+    const retry = parseMember(input.retry, RETRY_CLASSES, "none", "invalid_descriptor");
+    const idempotency = parseMember(input.idempotency, IDEMPOTENCY_CLASSES, "none", "invalid_descriptor");
+    const isolation = parseMember(input.isolation, ISOLATION_CLASSES, "inherit", "invalid_descriptor");
+    return Object.freeze({
+        descriptorVersion: CAPABILITY_DESCRIPTOR_VERSION,
+        kind,
+        name,
+        version,
+        schemaDigest,
+        requiredCapabilities,
+        approval: Object.freeze(approval),
+        retry,
+        idempotency,
+        isolation,
+    });
+}
+/**
+ * Adapt a Nifra core {@link ToolContract} into a descriptor without touching its execution contract.
+ * The schema digest is taken over the tool's own input JSON schema, retry follows idempotency, and
+ * the approval policy is carried through unchanged, so the descriptor is a faithful, content-free
+ * projection of the contract the runtime already enforces.
+ */
+export function descriptorFromTool(tool, options = {}) {
+    return composeDescriptor({
+        kind: options.kind ?? "tool",
+        name: tool.name,
+        ...(options.version === undefined ? {} : { version: options.version }),
+        inputSchema: toolInputJsonSchema(tool),
+        requiredCapabilities: [tool.capability],
+        approval: tool.approval,
+        retry: tool.idempotency === undefined ? "none" : "idempotent",
+        idempotency: tool.idempotency === undefined ? "none" : tool.idempotency.scope,
+        isolation: options.isolation ?? "inherit",
+    });
+}
+function identityKey(descriptor) {
+    return `${descriptor.kind}${descriptor.name}`;
+}
+function compareDescriptors(a, b) {
+    if (a.kind !== b.kind)
+        return a.kind < b.kind ? -1 : 1;
+    if (a.name !== b.name)
+        return a.name < b.name ? -1 : 1;
+    if (a.version !== b.version)
+        return a.version < b.version ? -1 : 1;
+    return 0;
+}
+function canonicalDescriptor(descriptor) {
+    return {
+        descriptorVersion: descriptor.descriptorVersion,
+        kind: descriptor.kind,
+        name: descriptor.name,
+        version: descriptor.version,
+        schemaDigest: descriptor.schemaDigest,
+        requiredCapabilities: [...descriptor.requiredCapabilities],
+        approval: { ...descriptor.approval },
+        retry: descriptor.retry,
+        idempotency: descriptor.idempotency,
+        isolation: descriptor.isolation,
+    };
+}
+/**
+ * Compose a deterministic registry snapshot. Descriptors are validated, checked for identity
+ * collisions, canonically ordered, and digested. Two descriptors that share a (kind, name) identity
+ * fail `descriptor_collision` when their schema digests agree and `schema_drift` when they differ -
+ * a drifted schema is a distinct, addressable failure from a duplicate registration. Because the set
+ * is sorted before it is digested, the snapshot digest is independent of the input order.
+ */
+export async function composeRegistrySnapshot(descriptors) {
+    const validated = descriptors.map((descriptor) => parseCapabilityDescriptor(descriptor));
+    const byIdentity = new Map();
+    for (const descriptor of validated) {
+        const key = identityKey(descriptor);
+        const existing = byIdentity.get(key);
+        if (existing !== undefined) {
+            throw new RegistryError(existing.schemaDigest === descriptor.schemaDigest ? "descriptor_collision" : "schema_drift");
+        }
+        byIdentity.set(key, descriptor);
+    }
+    const ordered = [...validated].sort(compareDescriptors);
+    const digest = await sha256HexOf(canonicalJson({
+        version: REGISTRY_SNAPSHOT_VERSION,
+        descriptors: ordered.map(canonicalDescriptor),
+    }));
+    return Object.freeze({
+        version: REGISTRY_SNAPSHOT_VERSION,
+        digest,
+        descriptors: Object.freeze(ordered),
+    });
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAEjE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAA;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAA;AAUnD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAiB;IACpE,MAAM;IACN,UAAU;IACV,WAAW;IACX,eAAe;IACf,oBAAoB;CACrB,CAAC,CAAA;AAUF,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;AAItF,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAmB;IACzE,MAAM;IACN,SAAS;IACT,SAAS;CACV,CAAC,CAAA;AAIF,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAiB;IACrE,SAAS;IACT,SAAS;IACT,SAAS;CACV,CAAC,CAAA;AAoCF,wGAAwG;AACxG,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAmB;IAEhC,YAAY,IAAuB,EAAE,OAAO,GAAG,IAAI;QACjD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,GAAG,qCAAqC,CAAA;AACxD,MAAM,gBAAgB,GAAG,sCAAsC,CAAA;AAC/D,MAAM,aAAa,GAAG,qCAAqC,CAAA;AAC3D,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAEtC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,mBAAmB;IACnB,MAAM;IACN,MAAM;IACN,SAAS;IACT,cAAc;IACd,sBAAsB;IACtB,UAAU;IACV,OAAO;IACP,aAAa;IACb,WAAW;CACZ,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,aAAa;IACb,aAAa;IACb,OAAO;IACP,QAAQ;IACR,aAAa;IACb,cAAc;IACd,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,WAAW;IACX,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;CACP,CAAC,CAAA;AAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,qGAAqG;AACrG,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9F,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAA;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC7B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aAC1C,IAAI,EAAE,CAAA;QACT,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACnG,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,uBAAuB,OAAO,KAAK,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3D,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAA;IAC7C,OAAO,KAAuB,CAAA;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,CAAC,CAAA;IACjG,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAC/F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAA;IAC1E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;YAC5D,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAA;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YACpE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAA;QAC7C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACrC,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,OAA4B,EAC5B,QAAW,EACX,IAAuB;IAEvB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAA;IACnF,OAAO,KAAU,CAAA;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA+B;IAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QACtC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,eAAe,CAAC,CAAA;QACnE,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAA;IACnE,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,iBAAiB,KAAK,6BAA6B;QAC3D,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACnF,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAA;IAClD,MAAM,oBAAoB,GAAG,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAClF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAa,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,CAAC,WAAW,EACjB,mBAAmB,EACnB,MAAM,EACN,oBAAoB,CACrB,CAAA;IACD,MAAM,SAAS,GAAG,WAAW,CAC3B,KAAK,CAAC,SAAS,EACf,iBAAiB,EACjB,SAAS,EACT,oBAAoB,CACrB,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,6BAA6B;QAChD,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,oBAAoB;QACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,KAAK;QACL,WAAW;QACX,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AAgBD,MAAM,0BAA0B,GAAG,OAAO,CAAA;AAE1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAsB;IAC5D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAA;IACzE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAA;IAC/E,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;IACxE,MAAM,oBAAoB,GAAG,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAClF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAa,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,CAAC,WAAW,EACjB,mBAAmB,EACnB,MAAM,EACN,oBAAoB,CACrB,CAAA;IACD,MAAM,SAAS,GAAG,WAAW,CAC3B,KAAK,CAAC,SAAS,EACf,iBAAiB,EACjB,SAAS,EACT,oBAAoB,CACrB,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,6BAA6B;QAChD,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,YAAY;QACZ,oBAAoB;QACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,KAAK;QACL,WAAW;QACX,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAiC,EACjC,UAAiC,EAAE;IAEnC,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;QAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC;QACtC,oBAAoB,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;QAC7D,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK;QAC7E,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;KAC1C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAAgC;IACnD,OAAO,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAA;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAuB,EAAE,CAAuB;IAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAgC;IAC3D,OAAO;QACL,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,oBAAoB,EAAE,CAAC,GAAG,UAAU,CAAC,oBAAoB,CAAC;QAC1D,QAAQ,EAAE,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAA4C;IAE5C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAA;IACxF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAA;IAC1D,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CACrB,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc,CAC5F,CAAA;QACH,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACjC,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,aAAa,CAAC;QACZ,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;KAC9C,CAAC,CACH,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,yBAAyB;QAClC,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KACpC,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nifrajs/agent",
-  "version": "2.14.1",
+  "version": "3.2.0",
   "description": "Provider-neutral, typed, resumable agent turns built on Nifra tool contracts.",
   "keywords": [
     "bun",
@@ -25,6 +25,16 @@
       "bun": "./src/events.ts",
       "types": "./dist/events.d.ts",
       "default": "./dist/events.js"
+    },
+    "./mount": {
+      "bun": "./src/mount.ts",
+      "types": "./dist/mount.d.ts",
+      "default": "./dist/mount.js"
+    },
+    "./registry": {
+      "bun": "./src/registry.ts",
+      "types": "./dist/registry.d.ts",
+      "default": "./dist/registry.js"
     }
   },
   "files": [
@@ -40,7 +50,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@nifrajs/core": "2.14.1"
+    "@nifrajs/core": "3.2.0"
   },
   "repository": {
     "type": "git",