catelog 0.0.0-stage → 1.0.0

package/dist/security.js

@@ -0,0 +1,126 @@
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+export class SecurityVerificationError extends Error {
+    code;
+    statusCode;
+    constructor(code, message, statusCode = 401) {
+        super(message);
+        this.code = code;
+        this.statusCode = statusCode;
+        this.name = "SecurityVerificationError";
+    }
+}
+export class SecurityManager {
+    secret;
+    maxTimestampDriftMs;
+    nonceTtlMs;
+    seenNonces = new Map();
+    activeRunIds = new Set();
+    completedRunIds = new Map();
+    constructor(options = {}) {
+        this.secret = options.secret;
+        this.maxTimestampDriftMs = options.maxTimestampDriftMs ?? 300_000; // 5 minutes
+        this.nonceTtlMs = options.nonceTtlMs ?? 300_000; // 5 minutes
+    }
+    setSecret(secret) {
+        this.secret = secret;
+    }
+    getSecret() {
+        return this.secret;
+    }
+    /**
+     * Computes SHA-256 hash in lowercase hex of request body
+     */
+    computeBodyHash(rawBody) {
+        return createHash("sha256").update(rawBody).digest("hex");
+    }
+    /**
+     * Constructs the canonical string according to MAPS 1.0.0:
+     * METHOD\nPATH\nTIMESTAMP\nNONCE\nRUN_ID\nBodyHash
+     */
+    buildCanonicalString(method, path, timestamp, nonce, runId, bodyHash) {
+        const normalizedMethod = method.toUpperCase();
+        const normalizedPath = path.split("?")[0] || "/";
+        return `${normalizedMethod}\n${normalizedPath}\n${timestamp}\n${nonce}\n${runId}\n${bodyHash}`;
+    }
+    /**
+     * Calculates HMAC-SHA256 signature in lowercase hex
+     */
+    calculateSignature(canonicalString, secret) {
+        return createHmac("sha256", secret).update(canonicalString).digest("hex");
+    }
+    /**
+     * Verifies headers, timestamp, nonce, and HMAC-SHA256 signature.
+     */
+    verifyRequest(params) {
+        this.cleanupOldEntries();
+        // If no secret configured, skip HMAC check (e.g. local dev / unauthenticated mode)
+        if (!this.secret) {
+            const runId = params.headers["x-marketplace-run-id"] || "dev-run-id";
+            const nonce = params.headers["x-marketplace-nonce"] || "dev-nonce";
+            const timestamp = Date.now();
+            return { runId, nonce, timestamp };
+        }
+        const timestampHeader = params.headers["x-marketplace-timestamp"];
+        const nonceHeader = params.headers["x-marketplace-nonce"];
+        const runIdHeader = params.headers["x-marketplace-run-id"];
+        const signatureHeader = params.headers["x-marketplace-signature"];
+        if (!timestampHeader || !nonceHeader || !runIdHeader || !signatureHeader) {
+            throw new SecurityVerificationError("AUTH_INVALID_SIGNATURE", "Missing required marketplace authentication headers", 401);
+        }
+        const timestamp = Number.parseInt(timestampHeader, 10);
+        if (Number.isNaN(timestamp)) {
+            throw new SecurityVerificationError("AUTH_TIMESTAMP_OUT_OF_BOUNDS", "Malformed X-Marketplace-Timestamp header", 401);
+        }
+        // 1. Timestamp Bounds: Reject if |CurrentTime - Timestamp| > 5 minutes
+        const now = Date.now();
+        if (Math.abs(now - timestamp) > this.maxTimestampDriftMs) {
+            throw new SecurityVerificationError("AUTH_TIMESTAMP_OUT_OF_BOUNDS", `Timestamp out of allowable bounds (clock drift > ${this.maxTimestampDriftMs}ms)`, 401);
+        }
+        // 2. Nonce Uniqueness: Sliding cache
+        if (this.seenNonces.has(nonceHeader)) {
+            throw new SecurityVerificationError("AUTH_REPLAY_DETECTED", "Duplicate nonce detected (replay attack guard)", 401);
+        }
+        // 3. Run ID Idempotency: Duplicate active or completed run
+        if (this.activeRunIds.has(runIdHeader) || this.completedRunIds.has(runIdHeader)) {
+            throw new SecurityVerificationError("AUTH_REPLAY_DETECTED", `Run ID ${runIdHeader} is currently executing or has already been completed`, 401);
+        }
+        // 4. Verify HMAC signature
+        const bodyHash = this.computeBodyHash(params.rawBody);
+        const canonicalString = this.buildCanonicalString(params.method, params.path, timestampHeader, nonceHeader, runIdHeader, bodyHash);
+        const expectedSignature = this.calculateSignature(canonicalString, this.secret);
+        const sigBuf = Buffer.from(signatureHeader.toLowerCase(), "utf8");
+        const expBuf = Buffer.from(expectedSignature.toLowerCase(), "utf8");
+        if (sigBuf.length !== expBuf.length || !timingSafeEqual(sigBuf, expBuf)) {
+            throw new SecurityVerificationError("AUTH_INVALID_SIGNATURE", "HMAC-SHA256 signature verification failed", 401);
+        }
+        // Mark nonce as seen
+        this.seenNonces.set(nonceHeader, now);
+        return {
+            runId: runIdHeader,
+            nonce: nonceHeader,
+            timestamp,
+        };
+    }
+    markRunStarted(runId) {
+        this.activeRunIds.add(runId);
+    }
+    markRunCompleted(runId) {
+        this.activeRunIds.delete(runId);
+        this.completedRunIds.set(runId, Date.now());
+    }
+    cleanupOldEntries() {
+        const now = Date.now();
+        const expiry = now - this.nonceTtlMs;
+        for (const [nonce, time] of this.seenNonces.entries()) {
+            if (time < expiry) {
+                this.seenNonces.delete(nonce);
+            }
+        }
+        for (const [runId, time] of this.completedRunIds.entries()) {
+            if (time < expiry) {
+                this.completedRunIds.delete(runId);
+            }
+        }
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAStE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAEhC;IAEA;IAHlB,YACkB,IAAe,EAC/B,OAAe,EACC,aAAqB,GAAG;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAW;QAEf,eAAU,GAAV,UAAU,CAAc;QAGxC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IAClB,MAAM,CAAU;IAChB,mBAAmB,CAAS;IAC5B,UAAU,CAAS;IACnB,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,YAAY,UAA2B,EAAE;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,CAAC,YAAY;QAC/E,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,YAAY;IAC/D,CAAC;IAEM,SAAS,CAAC,MAAc;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACI,eAAe,CAAC,OAAwB;QAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACI,oBAAoB,CACzB,MAAc,EACd,IAAY,EACZ,SAA0B,EAC1B,KAAa,EACb,KAAa,EACb,QAAgB;QAEhB,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACjD,OAAO,GAAG,gBAAgB,KAAK,cAAc,KAAK,SAAS,KAAK,KAAK,KAAK,KAAK,KAAK,QAAQ,EAAE,CAAC;IACjG,CAAC;IAED;;OAEG;IACI,kBAAkB,CAAC,eAAuB,EAAE,MAAc;QAC/D,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACI,aAAa,CAAC,MAKpB;QACC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,mFAAmF;QACnF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,KAAK,GAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAY,IAAI,YAAY,CAAC;YACjF,MAAM,KAAK,GAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAY,IAAI,WAAW,CAAC;YAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAuB,CAAC;QACxF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAuB,CAAC;QAChF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAuB,CAAC;QACjF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAuB,CAAC;QAExF,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,CAAC;YACzE,MAAM,IAAI,yBAAyB,CACjC,wBAAwB,EACxB,qDAAqD,EACrD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,0CAA0C,EAC1C,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzD,MAAM,IAAI,yBAAyB,CACjC,8BAA8B,EAC9B,oDAAoD,IAAI,CAAC,mBAAmB,KAAK,EACjF,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,yBAAyB,CACjC,sBAAsB,EACtB,gDAAgD,EAChD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,yBAAyB,CACjC,sBAAsB,EACtB,UAAU,WAAW,uDAAuD,EAC5E,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAC/C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,eAAe,EACf,WAAW,EACX,WAAW,EACX,QAAQ,CACT,CAAC;QAEF,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QAEpE,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,yBAAyB,CACjC,wBAAwB,EACxB,2CAA2C,EAC3C,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAEtC,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,WAAW;YAClB,SAAS;SACV,CAAC;IACJ,CAAC;IAEM,cAAc,CAAC,KAAa;QACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAEM,gBAAgB,CAAC,KAAa;QACnC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEO,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QAErC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/server.d.ts

@@ -0,0 +1,10 @@
+import { type Server } from "node:http";
+import type { MarketplaceAgent } from "./agent.js";
+export interface ServerOptions {
+    port?: number;
+    host?: string;
+    silent?: boolean;
+    onListening?: (url: string) => void;
+}
+export declare function startAgentServer(agent: MarketplaceAgent<any, any>, options?: ServerOptions): Server;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAA6C,MAAM,WAAW,CAAC;AACjG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,MAAM,CAwBvG"}

package/dist/server.js

@@ -0,0 +1,26 @@
+import { createServer } from "node:http";
+import { renderBanner } from "./banner.js";
+export function startAgentServer(agent, options = {}) {
+    const port = options.port ?? (process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 3000);
+    const host = options.host ?? "0.0.0.0";
+    const server = createServer((req, res) => {
+        agent.handleRequest(req, res).catch((err) => {
+            console.error("[catelog-sdk] Unhandled error during request handling:", err);
+            if (!res.writableEnded) {
+                res.writeHead(500, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: { code: "INTERNAL_CRASH", message: "Server encountered an unhandled error" } }));
+            }
+        });
+    });
+    server.listen(port, host, () => {
+        const url = `http://${host === "0.0.0.0" ? "localhost" : host}:${port}`;
+        if (options.onListening) {
+            options.onListening(url);
+        }
+        else if (!options.silent) {
+            renderBanner("startup", { name: agent.name, url });
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,UAAU,gBAAgB,CAAC,KAAiC,EAAE,UAAyB,EAAE;IAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAEvC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1C,OAAO,CAAC,KAAK,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC7B,MAAM,GAAG,GAAG,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACxE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3B,YAAY,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sse.d.ts

@@ -0,0 +1,32 @@
+import type { ServerResponse } from "node:http";
+import type { AgentStream, StructuredError, TelemetryData } from "./types.js";
+export interface SSEWriterOptions {
+    heartbeatIntervalMs?: number;
+    onClientDisconnect?: () => void;
+}
+export declare class SSEWriter implements AgentStream {
+    private runId;
+    private res;
+    private heartbeatTimer?;
+    private stepIndex;
+    private deltaIndex;
+    private closed;
+    private abortController;
+    constructor(runId: string, res: ServerResponse, options?: SSEWriterOptions);
+    get signal(): AbortSignal;
+    isClosed(): boolean;
+    /**
+     * Generic raw event sender adhering to SSE framing:
+     * event: <EVENT_TYPE>\ndata: <JSON_STRING>\n\n
+     */
+    sendEvent(eventType: string, data: unknown): void;
+    sendRunStarted(): void;
+    step(label: string): void;
+    delta(content: string, delta_type?: "text" | "json_patch"): void;
+    emit(event: string, data: unknown): void;
+    sendRunSucceeded<TOutput>(output: TOutput, durationMs: number, telemetry?: TelemetryData): void;
+    sendRunFailed(error: StructuredError, durationMs: number): void;
+    close(): void;
+    private clearHeartbeat;
+}
+//# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EACV,WAAW,EAOX,eAAe,EACf,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;CACjC;AAED,qBAAa,SAAU,YAAW,WAAW;IAC3C,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,GAAG,CAAiB;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,eAAe,CAAkB;gBAE7B,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,GAAE,gBAAqB;IAwC9E,IAAW,MAAM,IAAI,WAAW,CAE/B;IAEM,QAAQ,IAAI,OAAO;IAI1B;;;OAGG;IACI,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAUjD,cAAc,IAAI,IAAI;IAStB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAYzB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,GAAG,YAAqB,GAAG,IAAI;IAWxE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAIxC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,aAAa,GAAG,IAAI;IAa/F,aAAa,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAY/D,KAAK,IAAI,IAAI;IAWpB,OAAO,CAAC,cAAc;CAMvB"}

package/dist/sse.js

@@ -0,0 +1,141 @@
+export class SSEWriter {
+    runId;
+    res;
+    heartbeatTimer;
+    stepIndex = 0;
+    deltaIndex = 0;
+    closed = false;
+    abortController;
+    constructor(runId, res, options = {}) {
+        this.runId = runId;
+        this.res = res;
+        this.abortController = new AbortController();
+        // Set standard SSE headers
+        this.res.writeHead(200, {
+            "Content-Type": "text/event-stream; charset=utf-8",
+            "Cache-Control": "no-cache, no-transform",
+            Connection: "keep-alive",
+            "X-Accel-Buffering": "no",
+        });
+        // Flush headers if supported
+        if (typeof this.res.flushHeaders === "function") {
+            this.res.flushHeaders();
+        }
+        // Client disconnect detection
+        this.res.on("close", () => {
+            if (!this.closed) {
+                this.closed = true;
+                this.clearHeartbeat();
+                this.abortController.abort();
+                options.onClientDisconnect?.();
+            }
+        });
+        // Start 15-second heartbeat
+        const interval = options.heartbeatIntervalMs ?? 15_000;
+        this.heartbeatTimer = setInterval(() => {
+            if (!this.closed) {
+                this.sendEvent("heartbeat", {
+                    event: "heartbeat",
+                    timestamp: Date.now(),
+                });
+            }
+        }, interval);
+    }
+    get signal() {
+        return this.abortController.signal;
+    }
+    isClosed() {
+        return this.closed;
+    }
+    /**
+     * Generic raw event sender adhering to SSE framing:
+     * event: <EVENT_TYPE>\ndata: <JSON_STRING>\n\n
+     */
+    sendEvent(eventType, data) {
+        if (this.closed)
+            return;
+        try {
+            this.res.write(`event: ${eventType}\ndata: ${JSON.stringify(data)}\n\n`);
+        }
+        catch {
+            this.closed = true;
+            this.clearHeartbeat();
+        }
+    }
+    sendRunStarted() {
+        const payload = {
+            event: "run.started",
+            run_id: this.runId,
+            timestamp: Date.now(),
+        };
+        this.sendEvent("run.started", payload);
+    }
+    step(label) {
+        this.stepIndex += 1;
+        const payload = {
+            event: "step.started",
+            run_id: this.runId,
+            step_index: this.stepIndex,
+            label,
+            timestamp: Date.now(),
+        };
+        this.sendEvent("step.started", payload);
+    }
+    delta(content, delta_type = "text") {
+        const payload = {
+            event: "output.delta",
+            run_id: this.runId,
+            index: this.deltaIndex++,
+            delta_type,
+            content,
+        };
+        this.sendEvent("output.delta", payload);
+    }
+    emit(event, data) {
+        this.sendEvent(event, data);
+    }
+    sendRunSucceeded(output, durationMs, telemetry) {
+        if (this.closed)
+            return;
+        const payload = {
+            event: "run.succeeded",
+            run_id: this.runId,
+            duration_ms: durationMs,
+            output,
+            telemetry,
+        };
+        this.sendEvent("run.succeeded", payload);
+        this.close();
+    }
+    sendRunFailed(error, durationMs) {
+        if (this.closed)
+            return;
+        const payload = {
+            event: "run.failed",
+            run_id: this.runId,
+            duration_ms: durationMs,
+            error,
+        };
+        this.sendEvent("run.failed", payload);
+        this.close();
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.clearHeartbeat();
+        try {
+            this.res.end();
+        }
+        catch {
+            // Ignore write errors on close
+        }
+    }
+    clearHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = undefined;
+        }
+    }
+}
+//# sourceMappingURL=sse.js.map

package/dist/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAkBA,MAAM,OAAO,SAAS;IACZ,KAAK,CAAS;IACd,GAAG,CAAiB;IACpB,cAAc,CAAkB;IAChC,SAAS,GAAG,CAAC,CAAC;IACd,UAAU,GAAG,CAAC,CAAC;IACf,MAAM,GAAG,KAAK,CAAC;IACf,eAAe,CAAkB;IAEzC,YAAY,KAAa,EAAE,GAAmB,EAAE,UAA4B,EAAE;QAC5E,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAE7C,2BAA2B;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,cAAc,EAAE,kCAAkC;YAClD,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC1B,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;oBAC1B,KAAK,EAAE,WAAW;oBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,QAAQ,CAAC,CAAC;IACf,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;IACrC,CAAC;IAEM,QAAQ;QACb,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACI,SAAS,CAAC,SAAiB,EAAE,IAAa;QAC/C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,SAAS,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEM,cAAc;QACnB,MAAM,OAAO,GAAoB;YAC/B,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAEM,IAAI,CAAC,KAAa;QACvB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,MAAM,OAAO,GAAqB;YAChC,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,aAAoC,MAAM;QACtE,MAAM,OAAO,GAAqB;YAChC,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE;YACxB,UAAU;YACV,OAAO;SACR,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEM,IAAI,CAAC,KAAa,EAAE,IAAa;QACtC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEM,gBAAgB,CAAU,MAAe,EAAE,UAAkB,EAAE,SAAyB;QAC7F,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,OAAO,GAA+B;YAC1C,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,WAAW,EAAE,UAAU;YACvB,MAAM;YACN,SAAS;SACV,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEM,aAAa,CAAC,KAAsB,EAAE,UAAkB;QAC7D,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,OAAO,GAAmB;YAC9B,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,WAAW,EAAE,UAAU;YACvB,KAAK;SACN,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEM,KAAK;QACV,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,128 @@
+export declare const PROTOCOL_VERSION = "1.0.0";
+/**
+ * Standard error codes defined by Marketplace Agent Protocol Specification (MAPS)
+ */
+export type ErrorCode = "AUTH_INVALID_SIGNATURE" | "AUTH_TIMESTAMP_OUT_OF_BOUNDS" | "AUTH_REPLAY_DETECTED" | "INVALID_INPUT" | "MODEL_RATE_LIMIT" | "UPSTREAM_TIMEOUT" | "EXECUTION_TIMEOUT" | "INTERNAL_CRASH" | "TOOL_FAILURE";
+export interface StructuredError {
+    code: ErrorCode | string;
+    message: string;
+    retryable: boolean;
+    details?: Record<string, unknown>;
+}
+export interface TelemetryData {
+    llm_tokens?: {
+        prompt?: number;
+        completion?: number;
+        total?: number;
+    };
+    model_used?: string;
+    cost_usd?: number;
+}
+export interface AgentCapabilities {
+    streaming: boolean;
+    delta_stream?: boolean;
+    max_timeout_seconds?: number;
+}
+export interface AgentManifest {
+    id: string;
+    name: string;
+    version: string;
+    description: string;
+    protocol_version: string;
+    capabilities: AgentCapabilities;
+    input_schema: Record<string, unknown>;
+    output_schema: Record<string, unknown>;
+}
+export interface HealthCheckResponse {
+    status: "ready" | "degraded" | "not_ready";
+    protocol_version: string;
+    uptime_seconds: number;
+    environment_ready: boolean;
+    details?: Record<string, unknown>;
+}
+export interface ExecuteRequest<TInput = Record<string, unknown>> {
+    run_id: string;
+    input: TInput;
+    deadline_ms?: number;
+    metadata?: {
+        buyer_id?: string;
+        session_id?: string;
+        [key: string]: unknown;
+    };
+}
+export interface ExecuteSuccessResponse<TOutput = Record<string, unknown>> {
+    run_id: string;
+    status: "succeeded";
+    duration_ms: number;
+    output: TOutput;
+    error?: false;
+    telemetry?: TelemetryData;
+}
+export interface ExecuteFailureResponse {
+    run_id: string;
+    status: "failed" | "cancelled";
+    duration_ms: number;
+    error: StructuredError;
+    output?: false;
+    telemetry?: TelemetryData;
+}
+export type ExecuteResponse<TOutput = Record<string, unknown>> = ExecuteSuccessResponse<TOutput> | ExecuteFailureResponse;
+export interface RunStartedEvent {
+    event: "run.started";
+    run_id: string;
+    timestamp: number;
+}
+export interface StepStartedEvent {
+    event: "step.started";
+    run_id: string;
+    step_index: number;
+    label: string;
+    timestamp: number;
+}
+export interface OutputDeltaEvent {
+    event: "output.delta";
+    run_id: string;
+    index: number;
+    delta_type: "text" | "json_patch";
+    content: string;
+}
+export interface HeartbeatEvent {
+    event: "heartbeat";
+    timestamp: number;
+}
+export interface RunSucceededEvent<TOutput = Record<string, unknown>> {
+    event: "run.succeeded";
+    run_id: string;
+    duration_ms: number;
+    output: TOutput;
+    telemetry?: TelemetryData;
+}
+export interface RunFailedEvent {
+    event: "run.failed";
+    run_id: string;
+    duration_ms: number;
+    error: StructuredError;
+}
+export type SSEProtocolEvent = RunStartedEvent | StepStartedEvent | OutputDeltaEvent | HeartbeatEvent | RunSucceededEvent | RunFailedEvent;
+/**
+ * Stream controller passed to agent execute handlers
+ */
+export interface AgentStream {
+    step: (label: string) => void;
+    delta: (content: string, type?: "text" | "json_patch") => void;
+    emit: (event: string, data: unknown) => void;
+    isClosed: () => boolean;
+}
+export interface AgentExecutionContext<TInput = Record<string, unknown>> {
+    runId: string;
+    input: TInput;
+    stream: AgentStream;
+    signal: AbortSignal;
+    metadata?: Record<string, unknown>;
+    deadlineMs?: number;
+}
+export interface AgentExecutionResult<TOutput = Record<string, unknown>> {
+    output: TOutput;
+    telemetry?: TelemetryData;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,UAAU,CAAC;AAExC;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB,wBAAwB,GACxB,8BAA8B,GAC9B,sBAAsB,GACtB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE;QACX,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,iBAAiB,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACzD,sBAAsB,CAAC,OAAO,CAAC,GAC/B,sBAAsB,CAAC;AAG3B,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,YAAY,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,GACd,iBAAiB,GACjB,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,KAAK,IAAI,CAAC;IAC/D,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC7C,QAAQ,EAAE,MAAM,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export const PROTOCOL_VERSION = "1.0.0";
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC"}

package/package.json

@@ -1,6 +1,53 @@
 {
   "name": "catelog",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Official TypeScript SDK for Marketplace Agent Protocol Specification (MAPS)",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "catelog": "./scripts/postinstall.js"
+  },
+  "files": [
+    "dist",
+    "scripts",
+    "README.md",
+    "DECISION.md",
+    "LICENSE"
+  ],
+  "author": "ROX",
+  "license": "MIT",
+  "keywords": [
+    "ai",
+    "agent",
+    "marketplace",
+    "maps",
+    "protocol",
+    "langgraph",
+    "openai",
+    "paypal",
+    "sdk"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "tsx test/index.test.ts",
+    "prepublishOnly": "npm run build",
+    "postinstall": "node ./scripts/postinstall.js"
+  },
+  "dependencies": {
+    "zod": "^3.23.8",
+    "zod-to-json-schema": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.5.0"
+  }
+}

package/scripts/postinstall.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+
+/**
+ * Catelog postinstall hook - Pure zero-dependency Node.js script
+ * Runs smoothly in npm, pnpm, yarn, and bun environments.
+ */
+
+if (process.env.CI || process.env.CATELOG_SILENT || process.env.npm_config_loglevel === "silent") {
+  process.exit(0);
+}
+
+const c = {
+  reset: "\x1b[0m",
+  bold: "\x1b[1m",
+  dim: "\x1b[2m",
+  italic: "\x1b[3m",
+  cyan: "\x1b[36m",
+  brightCyan: "\x1b[96m",
+  magenta: "\x1b[35m",
+  brightMagenta: "\x1b[95m",
+  green: "\x1b[32m",
+  yellow: "\x1b[33m",
+  brightYellow: "\x1b[93m",
+  gray: "\x1b[90m",
+  white: "\x1b[97m",
+  brightBlue: "\x1b[94m",
+  bgMagenta: "\x1b[45m",
+};
+
+const ascii = `
+  ${c.brightCyan}  ██████╗ █████╗ ████████╗███████╗██╗      ██████╗  ██████╗ 
+  ${c.brightCyan} ██╔════╝██╔══██╗╚══██╔══╝██╔════╝██║     ██╔═══██╗██╔════╝ 
+  ${c.brightMagenta} ██║     ███████║   ██║   █████╗  ██║     ██║   ██║██║  ███╗
+  ${c.brightMagenta} ██║     ██╔══██║   ██║   ██╔══╝  ██║     ██║   ██║██║   ██║
+  ${c.magenta} ╚██████╗██║  ██║   ██║   ███████╗███████╗╚██████╔╝╚██████╔╝
+  ${c.magenta}  ╚═════╝╚═╝  ╚═╝   ╚═╝   ╚══════╝╚══════╝ ╚═════╝  ╚═════╝ 
+`.trimEnd();
+
+const width = 68;
+const line = c.gray + "─".repeat(width) + c.reset;
+const doubleLine = c.brightMagenta + "═".repeat(width) + c.reset;
+
+console.log("\n" + doubleLine);
+console.log(ascii);
+console.log(line);
+console.log(`  ${c.bgMagenta}${c.white}${c.bold} NOTE FROM TEAM ROX ${c.reset}`);
+console.log(
+  `  ${c.brightYellow}${c.italic}“Welcome to the agent economy, where humans and agents rent out intelligence.”${c.reset}`
+);
+console.log(line);
+console.log(`  ${c.green}✔${c.reset} ${c.bold}Catelog SDK installed successfully!${c.reset}`);
+console.log(`  ${c.dim}Supported runtimes & package managers:${c.reset}`);
+console.log(
+  `  ${c.cyan}pnpm${c.reset} ${c.gray}|${c.reset} ${c.brightBlue}npm${c.reset} ${c.gray}|${c.reset} ${c.brightMagenta}yarn${c.reset} ${c.gray}|${c.reset} ${c.brightYellow}bun${c.reset} ${c.gray}• Node.js 18+ • TypeScript 5+${c.reset}`
+);
+console.log("");
+console.log(`  ${c.bold}Quick Start:${c.reset}`);
+console.log(`  ${c.dim}import { createMarketplaceAgent } from "catelog";${c.reset}`);
+console.log(`  ${c.dim}const agent = createMarketplaceAgent({ ... });${c.reset}`);
+console.log(`  ${c.dim}agent.serve(3000);${c.reset}`);
+console.log(doubleLine + "\n");