@openwop/openwop 1.1.1 → 1.1.3

package/dist/parse-refusal.js

@@ -0,0 +1,216 @@
+/**
+ * parseRefusal — normalize per-provider LLM safety-stop signals to the
+ * canonical RFC 0032 §B.3 refusal shape.
+ *
+ * The three Tier-1 vendors (Anthropic / OpenAI / Google Gemini) surface
+ * refusals through different fields:
+ *
+ *   - **Anthropic Messages API**: `stop_reason: "refusal"` (their 2025
+ *     release) OR `stop_reason: "end_turn"` accompanied by safety-stop
+ *     markers in the content. Refusal text MAY be inline in the
+ *     `content[]` array's text blocks.
+ *   - **OpenAI Chat Completions**: `choices[0].finish_reason:
+ *     "content_filter"` OR `choices[0].message.refusal: <string>` (the
+ *     refusal-text field added in their structured-output release).
+ *   - **Google Gemini**: `candidates[0].finishReason: "SAFETY"` OR
+ *     `promptFeedback.blockReason: "SAFETY"` (input-side block).
+ *
+ * Without normalization, every host re-implements this detection. This
+ * helper consolidates the per-vendor shape-detection and returns a
+ * canonical `RefusalSignal | null` — null when the response is a
+ * normal completion (no refusal detected).
+ *
+ * Per RFC 0032 §B.3 + RFC 0033 §D, hosts MUST NOT retry on refusal
+ * (circumvention concern). Callers route the non-null return through
+ * `envelope.refusal` emission + the `envelope_refusal` terminal error
+ * code (per RFC 0033 §F).
+ *
+ * Per SECURITY/invariants.yaml §envelope-refusal-no-prompt-leak,
+ * `refusalText` MUST be passed through the host's BYOK redaction
+ * harness BEFORE persistence — this helper does NOT redact; the
+ * caller is responsible for SR-1 carry-forward.
+ *
+ * @see RFCS/0032-envelope-reliability-events.md §B.3
+ * @see RFCS/0033-envelope-completion-contract.md §D + §F
+ * @see SECURITY/invariants.yaml §envelope-refusal-no-prompt-leak
+ */
+/**
+ * Try to parse the response as OpenAI Chat Completions output.
+ *
+ * Detection: top-level `choices` array. Refusal signals:
+ *   - `choices[0].finish_reason === "content_filter"`
+ *   - `choices[0].message.refusal` is a non-empty string
+ */
+function tryParseOpenAI(response) {
+    if (!response || typeof response !== 'object')
+        return null;
+    const r = response;
+    if (!Array.isArray(r.choices) || r.choices.length === 0)
+        return null;
+    const choice = r.choices[0];
+    if (!choice || typeof choice !== 'object')
+        return null;
+    const finishReason = choice.finish_reason;
+    const message = choice.message;
+    const refusalField = message && typeof message === 'object' ? message.refusal : undefined;
+    // Primary signal: explicit refusal-text field. OpenAI's structured-output
+    // release populates this when the safety filter intervenes.
+    if (typeof refusalField === 'string' && refusalField.length > 0) {
+        return { refusalText: refusalField, provider: 'openai' };
+    }
+    // Secondary signal: finish_reason. content_filter is the canonical
+    // safety-stop value.
+    if (finishReason === 'content_filter') {
+        const text = message && typeof message === 'object' && typeof message.content === 'string'
+            ? message.content
+            : null;
+        return { refusalText: text, safetyCategory: 'content_filter', provider: 'openai' };
+    }
+    return null;
+}
+/**
+ * Try to parse the response as Anthropic Messages API output.
+ *
+ * Detection: top-level `stop_reason` field (Anthropic's distinctive
+ * marker). Refusal signals:
+ *   - `stop_reason === "refusal"` (their 2025 release)
+ *
+ * Anthropic does not surface a distinct safety-category field on
+ * refusals; the `refusal` stop_reason is the binary signal.
+ */
+function tryParseAnthropic(response) {
+    if (!response || typeof response !== 'object')
+        return null;
+    const r = response;
+    if (typeof r.stop_reason !== 'string')
+        return null;
+    if (r.stop_reason === 'refusal') {
+        // Extract refusal text from the content array (Anthropic returns an
+        // array of typed blocks; refusal text appears in `text`-type blocks).
+        let refusalText = null;
+        if (Array.isArray(r.content)) {
+            const textBlocks = [];
+            for (const block of r.content) {
+                if (block && typeof block === 'object') {
+                    const b = block;
+                    if (b.type === 'text' && typeof b.text === 'string') {
+                        textBlocks.push(b.text);
+                    }
+                }
+            }
+            if (textBlocks.length > 0)
+                refusalText = textBlocks.join('\n');
+        }
+        return { refusalText, provider: 'anthropic' };
+    }
+    return null;
+}
+/**
+ * Try to parse the response as Google Gemini `generateContent` output.
+ *
+ * Detection: top-level `candidates` array OR top-level `promptFeedback`
+ * object. Refusal signals:
+ *   - `candidates[0].finishReason === "SAFETY"` (output-side block)
+ *   - `promptFeedback.blockReason === "SAFETY"` (input-side block)
+ *
+ * Gemini surfaces safety categories on `safetyRatings[]`; this helper
+ * picks the highest-probability HIGH/MEDIUM-tier category as
+ * `safetyCategory` when available.
+ */
+function tryParseGemini(response) {
+    if (!response || typeof response !== 'object')
+        return null;
+    const r = response;
+    // Output-side safety block.
+    if (Array.isArray(r.candidates) && r.candidates.length > 0) {
+        const candidate = r.candidates[0];
+        if (candidate && typeof candidate === 'object' && candidate.finishReason === 'SAFETY') {
+            const safetyCategory = extractGeminiHighestRiskCategory(candidate.safetyRatings);
+            const result = { refusalText: null, provider: 'google' };
+            if (safetyCategory !== undefined)
+                result.safetyCategory = safetyCategory;
+            return result;
+        }
+    }
+    // Input-side safety block (Gemini rejected the prompt itself).
+    if (r.promptFeedback && typeof r.promptFeedback === 'object') {
+        const pf = r.promptFeedback;
+        if (typeof pf.blockReason === 'string' && pf.blockReason.toUpperCase().includes('SAFETY')) {
+            const safetyCategory = extractGeminiHighestRiskCategory(pf.safetyRatings);
+            const result = { refusalText: null, provider: 'google' };
+            if (safetyCategory !== undefined)
+                result.safetyCategory = safetyCategory;
+            return result;
+        }
+    }
+    return null;
+}
+/**
+ * From a Gemini `safetyRatings[]` array, return the highest-probability
+ * non-NEGLIGIBLE category identifier. Returns `undefined` when the
+ * array is absent or all ratings are NEGLIGIBLE.
+ */
+function extractGeminiHighestRiskCategory(safetyRatings) {
+    if (!Array.isArray(safetyRatings))
+        return undefined;
+    const PROBABILITY_RANK = {
+        HIGH: 3,
+        MEDIUM: 2,
+        LOW: 1,
+        NEGLIGIBLE: 0,
+    };
+    let best = null;
+    for (const rating of safetyRatings) {
+        if (!rating || typeof rating !== 'object')
+            continue;
+        const r = rating;
+        if (typeof r.category !== 'string' || typeof r.probability !== 'string')
+            continue;
+        const rank = PROBABILITY_RANK[r.probability.toUpperCase()] ?? 0;
+        if (rank === 0)
+            continue;
+        if (best === null || rank > best.rank) {
+            best = { category: r.category, rank };
+        }
+    }
+    return best?.category;
+}
+/**
+ * Parse a provider response into a canonical refusal signal.
+ *
+ * Returns `null` when no refusal is detected (normal completion).
+ * Returns a `RefusalSignal` when the response matches one of the
+ * three Tier-1 vendors' safety-stop shapes.
+ *
+ * Detection order: OpenAI → Anthropic → Gemini. Each detector inspects
+ * a distinctive top-level field, so cross-vendor false-positives are
+ * unlikely. A response that doesn't match any vendor shape returns
+ * `null` (hosts that route through novel providers add their own
+ * detector + fall back to this for the three known ones).
+ *
+ * @example
+ * ```ts
+ * import { parseRefusal } from '@openwop/openwop';
+ *
+ * const response = await callOpenAI({...});
+ * const refusal = parseRefusal(response);
+ * if (refusal) {
+ *   // Route through envelope.refusal emission + envelope_refusal error code.
+ *   // REMEMBER to redact refusalText through the BYOK harness before
+ *   // persistence (SECURITY invariant envelope-refusal-no-prompt-leak).
+ *   await emitEnvelopeRefusal({
+ *     refusalText: redactBYOK(refusal.refusalText),
+ *     safetyCategory: refusal.safetyCategory,
+ *     provider: refusal.provider,
+ *   });
+ *   throw new EnvelopeRefusalError(...);
+ * }
+ * // ...normal-completion handling...
+ * ```
+ */
+export function parseRefusal(providerResponse) {
+    return (tryParseOpenAI(providerResponse) ??
+        tryParseAnthropic(providerResponse) ??
+        tryParseGemini(providerResponse));
+}
+//# sourceMappingURL=parse-refusal.js.map

package/dist/parse-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-refusal.js","sourceRoot":"","sources":["../src/parse-refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AA8FH;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAiB;IACvC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,CAAC,GAAG,QAA0B,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAiB,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEvD,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAA0C,CAAC;IAClE,MAAM,YAAY,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1F,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC3D,CAAC;IAED,mEAAmE;IACnE,qBAAqB;IACrB,IAAI,YAAY,KAAK,gBAAgB,EAAE,CAAC;QACtC,MAAM,IAAI,GACR,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;YAC3E,CAAC,CAAC,OAAO,CAAC,OAAO;YACjB,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,QAAiB;IAC1C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,CAAC,GAAG,QAA6B,CAAC;IACxC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,CAAC,GAAG,KAA2B,CAAC;oBACtC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACpD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IAChD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CAAC,QAAiB;IACvC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,CAAC,GAAG,QAA0B,CAAC;IAErC,4BAA4B;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAoB,CAAC;QACrD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtF,MAAM,cAAc,GAAG,gCAAgC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACjF,MAAM,MAAM,GAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACxE,IAAI,cAAc,KAAK,SAAS;gBAAE,MAAM,CAAC,cAAc,GAAG,cAAc,CAAC;YACzE,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,EAAE,GAAG,CAAC,CAAC,cAAsC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,MAAM,cAAc,GAAG,gCAAgC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACxE,IAAI,cAAc,KAAK,SAAS;gBAAE,MAAM,CAAC,cAAc,GAAG,cAAc,CAAC;YACzE,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,gCAAgC,CAAC,aAAsB;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,gBAAgB,GAA2B;QAC/C,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,UAAU,EAAE,CAAC;KACd,CAAC;IACF,IAAI,IAAI,GAA8C,IAAI,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACpD,MAAM,CAAC,GAAG,MAA4B,CAAC;QACvC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;YAAE,SAAS;QAClF,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,CAAC;YAAE,SAAS;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,QAAQ,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,YAAY,CAAC,gBAAyB;IACpD,OAAO,CACL,cAAc,CAAC,gBAAgB,CAAC;QAChC,iBAAiB,CAAC,gBAAgB,CAAC;QACnC,cAAc,CAAC,gBAAgB,CAAC,CACjC,CAAC;AACJ,CAAC"}

package/dist/registry-helpers.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Public-registry read helpers per
+ * `spec/v1/registry-operations.md`.
+ *
+ * The OpenWOP host SDK targets the host wire surface
+ * (`/.well-known/openwop` + `/v1/runs/*` + `/v1/interrupts/*` etc).
+ * The **public node-pack registry** at `packs.openwop.dev` is a
+ * separate wire surface with its own discovery payload and pack-
+ * versioned read endpoints. This module exposes a thin typed client
+ * for that surface so adopters fetching pack manifests, indices, or
+ * signature material don't roll their own HTTP plumbing.
+ *
+ * Read-only by design — the public registry uses pull-request-driven
+ * publishing per `spec/v1/registry-operations.md` §"Submission flow"
+ * + the `registry-publish.yml` GitHub workflow. There is no write API.
+ *
+ * No auth required for public reads.
+ *
+ * @module @openwop/openwop/registry-helpers
+ */
+/** Public registry discovery payload per `registry-operations.md` §"Discovery". */
+export interface RegistryDiscovery {
+    registryVersion: string;
+    protocolVersion: string;
+    name?: string;
+    operator?: string;
+    url?: string;
+    supportedNamespaces: readonly string[];
+    supportedSigningMethods: readonly string[];
+    supportedTrustModes?: readonly string[];
+    endpoints: {
+        registryIndex: string;
+        packMetadata: string;
+        versionManifest: string;
+        versionTarball: string;
+        versionSignature: string;
+        publicKey: string;
+    };
+    signingKeys?: ReadonlyArray<{
+        keyId: string;
+        algorithm: string;
+        publicKeyUrl?: string;
+        permittedNamespaces?: readonly string[];
+        operator?: string;
+        status?: string;
+    }>;
+    [key: string]: unknown;
+}
+/** Registry-wide index entry per `/v1/index.json` rows. */
+export interface RegistryIndexEntry {
+    name: string;
+    latestVersion: string;
+    description?: string;
+    scope?: string;
+    [key: string]: unknown;
+}
+export interface RegistryIndex {
+    packs: ReadonlyArray<RegistryIndexEntry>;
+    generated?: string;
+    packCount?: number;
+    [key: string]: unknown;
+}
+/** Per-pack metadata document at `/v1/packs/{name}/index.json`. */
+export interface RegistryPackMetadata {
+    name: string;
+    description?: string;
+    versions: ReadonlyArray<string>;
+    latestVersion?: string;
+    [key: string]: unknown;
+}
+/** Version manifest at `/v1/packs/{name}/-/{version}.json`. */
+export interface RegistryVersionManifest {
+    name: string;
+    version: string;
+    description?: string;
+    /** SRI hash: `sha256-<43-char-b64>=`. */
+    integrity?: string;
+    signing?: {
+        method: 'ed25519' | 'manual' | string;
+        keyId: string;
+        publicKeyUrl?: string;
+    };
+    [key: string]: unknown;
+}
+export interface RegistryClientOptions {
+    /** Base URL for the registry. Defaults to `https://packs.openwop.dev`. */
+    baseUrl?: string;
+    /** Custom fetch implementation; defaults to `globalThis.fetch`. */
+    fetch?: typeof fetch;
+}
+/**
+ * Typed client for the public OpenWOP node-pack registry. Read-only;
+ * no auth required for the canonical public read surface.
+ *
+ * For host-side install-time verification (SRI + Ed25519 + lockfile),
+ * see `examples/hosts/postgres/src/pack-consumer.ts` — the registry
+ * client is the fetch surface; the consumer is the security surface.
+ */
+export declare class RegistryClient {
+    #private;
+    readonly baseUrl: string;
+    constructor(options?: RegistryClientOptions);
+    /** `GET /.well-known/openwop-registry` — discovery + endpoint catalog. */
+    discovery(): Promise<RegistryDiscovery>;
+    /** `GET /v1/index.json` — registry-wide pack index. */
+    index(): Promise<RegistryIndex>;
+    /** `GET /v1/packs/{name}/index.json` — per-pack metadata. */
+    pack(name: string): Promise<RegistryPackMetadata>;
+    /** `GET /v1/packs/{name}/-/{version}.json` — version manifest. */
+    version(name: string, version: string): Promise<RegistryVersionManifest>;
+    /** Fetch raw tarball bytes. Caller MUST verify SRI + signature before trust. */
+    tarball(name: string, version: string): Promise<Buffer>;
+    /** Fetch raw 64-byte Ed25519 signature bytes. */
+    signature(name: string, version: string): Promise<Buffer>;
+    /** Fetch a publisher's public key as PEM text. */
+    publicKey(keyId: string): Promise<string>;
+}
+//# sourceMappingURL=registry-helpers.d.ts.map

package/dist/registry-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-helpers.d.ts","sourceRoot":"","sources":["../src/registry-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,SAAS,EAAE;QACT,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,WAAW,CAAC,EAAE,aAAa,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,+DAA+D;AAC/D,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;QACtC,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAGb,OAAO,GAAE,qBAA0B;IAK/C,0EAA0E;IACpE,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI7C,uDAAuD;IACjD,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;IAIrC,6DAA6D;IACvD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAMvD,kEAAkE;IAC5D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAM9E,gFAAgF;IAC1E,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM7D,iDAAiD;IAC3C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM/D,kDAAkD;IAC5C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAmBhD"}

package/dist/registry-helpers.js

@@ -0,0 +1,82 @@
+/**
+ * Public-registry read helpers per
+ * `spec/v1/registry-operations.md`.
+ *
+ * The OpenWOP host SDK targets the host wire surface
+ * (`/.well-known/openwop` + `/v1/runs/*` + `/v1/interrupts/*` etc).
+ * The **public node-pack registry** at `packs.openwop.dev` is a
+ * separate wire surface with its own discovery payload and pack-
+ * versioned read endpoints. This module exposes a thin typed client
+ * for that surface so adopters fetching pack manifests, indices, or
+ * signature material don't roll their own HTTP plumbing.
+ *
+ * Read-only by design — the public registry uses pull-request-driven
+ * publishing per `spec/v1/registry-operations.md` §"Submission flow"
+ * + the `registry-publish.yml` GitHub workflow. There is no write API.
+ *
+ * No auth required for public reads.
+ *
+ * @module @openwop/openwop/registry-helpers
+ */
+/**
+ * Typed client for the public OpenWOP node-pack registry. Read-only;
+ * no auth required for the canonical public read surface.
+ *
+ * For host-side install-time verification (SRI + Ed25519 + lockfile),
+ * see `examples/hosts/postgres/src/pack-consumer.ts` — the registry
+ * client is the fetch surface; the consumer is the security surface.
+ */
+export class RegistryClient {
+    baseUrl;
+    #fetch;
+    constructor(options = {}) {
+        this.baseUrl = (options.baseUrl ?? 'https://packs.openwop.dev').replace(/\/$/, '');
+        this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
+    }
+    /** `GET /.well-known/openwop-registry` — discovery + endpoint catalog. */
+    async discovery() {
+        return this.#getJson('/.well-known/openwop-registry');
+    }
+    /** `GET /v1/index.json` — registry-wide pack index. */
+    async index() {
+        return this.#getJson('/v1/index.json');
+    }
+    /** `GET /v1/packs/{name}/index.json` — per-pack metadata. */
+    async pack(name) {
+        return this.#getJson(`/v1/packs/${encodeURIComponent(name)}/index.json`);
+    }
+    /** `GET /v1/packs/{name}/-/{version}.json` — version manifest. */
+    async version(name, version) {
+        return this.#getJson(`/v1/packs/${encodeURIComponent(name)}/-/${encodeURIComponent(version)}.json`);
+    }
+    /** Fetch raw tarball bytes. Caller MUST verify SRI + signature before trust. */
+    async tarball(name, version) {
+        return this.#getBinary(`/v1/packs/${encodeURIComponent(name)}/-/${encodeURIComponent(version)}.tgz`);
+    }
+    /** Fetch raw 64-byte Ed25519 signature bytes. */
+    async signature(name, version) {
+        return this.#getBinary(`/v1/packs/${encodeURIComponent(name)}/-/${encodeURIComponent(version)}.sig`);
+    }
+    /** Fetch a publisher's public key as PEM text. */
+    async publicKey(keyId) {
+        const res = await this.#fetch(`${this.baseUrl}/keys/${encodeURIComponent(keyId)}.pub`);
+        if (!res.ok)
+            throw new Error(`registry: GET /keys/${keyId}.pub returned ${res.status}`);
+        return res.text();
+    }
+    async #getJson(path) {
+        const res = await this.#fetch(`${this.baseUrl}${path}`, {
+            headers: { Accept: 'application/json' },
+        });
+        if (!res.ok)
+            throw new Error(`registry: GET ${path} returned ${res.status}`);
+        return (await res.json());
+    }
+    async #getBinary(path) {
+        const res = await this.#fetch(`${this.baseUrl}${path}`);
+        if (!res.ok)
+            throw new Error(`registry: GET ${path} returned ${res.status}`);
+        return Buffer.from(await res.arrayBuffer());
+    }
+}
+//# sourceMappingURL=registry-helpers.js.map

package/dist/registry-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-helpers.js","sourceRoot":"","sources":["../src/registry-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8EH;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,OAAO,CAAS;IAChB,MAAM,CAAe;IAE9B,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,QAAQ,CAAoB,+BAA+B,CAAC,CAAC;IAC3E,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,QAAQ,CAAgB,gBAAgB,CAAC,CAAC;IACxD,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,aAAa,CACnD,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAe;QACzC,OAAO,IAAI,CAAC,QAAQ,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAC9E,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAe;QACzC,OAAO,IAAI,CAAC,UAAU,CACpB,aAAa,kBAAkB,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAC7E,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC3C,OAAO,IAAI,CAAC,UAAU,CACpB,aAAa,kBAAkB,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAC7E,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACtD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}