# @lssm-tech/app.registry-packs

Registry application for discovering and distributing ContractSpec agent packs.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `3.0.4`
- Package path: `packages/apps/registry-packs`
- Manifest path: `packages/apps/registry-packs/package.json`
- Manifest Git blob: `55fc4cfff0502b5915876bfc3cd0ca84ad221074`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/app.registry-packs](https://lssm.co/docs/packages/app.registry-packs/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/registry-packs)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/registry-packs/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/registry-packs/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.registry-packs.txt)

## Package metadata

```json
{
  "layer": "apps",
  "physicalArea": null,
  "primaryArea": "tooling-and-agent-delivery",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "solutions",
    "catalogKind": "app",
    "catalogStatus": "active",
    "adoptionMode": "operator-only",
    "stability": "stable"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [CLI, authoring and agent tooling](https://lssm.co/docs/areas/tooling-and-agent-delivery/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/apps/registry-packs/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/registry-packs/README.md",
  "blobSha": "e5b7f1553dbeeb551c5d783ae0d13a6c75058b43",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# @lssm-tech/app.registry-packs

Website: https://agentpacks.dev

**Agentpacks registry server for pack publishing, discovery, reviews, dependency graphs, and MCP access.**

## What It Does

- Hosts the pack registry API, MCP layer, artifact storage, and publishing workflows.
- Supports versioning, reviews, organizations, quality scoring, GitHub integration, and webhooks.
- Supports both SQLite and PostgreSQL deployment paths with rate-limiting and auth middleware.
- `src/mcp/` contains MCP handlers, tools, prompts, and resources.
- `src/routes/` contains HTTP or API route definitions.
- `src/services/` contains business logic services and workflows.

## Running Locally

From `packages/apps/registry-packs`:
- `bun run dev`
- `bun run start`
- `bun run build`
- `bun run test`

## Usage

```bash
bun run dev
```


## Architecture

- `src/routes/` owns HTTP endpoints for packs, versions, publishing, organizations, dependencies, and GitHub flows.
- `src/services/` contains business workflows for registry operations, search, scoring, reviews, and webhooks.
- `src/mcp/` exposes registry tools, prompts, and resources over the MCP protocol.
- `src/db/`, `src/storage/`, `src/auth/`, and `src/middleware/` hold persistence and platform adapters.
- `src/index.ts` is the root public barrel and package entrypoint.
- `src/server.ts` is the main server bootstrap entrypoint.

## Public Entry Points

- Deployable API app with HTTP routes, MCP tools/prompts/resources, and registry publishing flows.
- Primary public surface is the HTTP route tree under `src/routes/`.
- This app exposes MCP-facing tools, prompts, resources, or transport handlers.

## Local Commands

- `bun run dev` — bun run --watch src/index.ts
- `bun run start` — bun run ./dist/index.js
- `bun run build` — bun build --minify-whitespace --minify-syntax --target bun --outfile dist/index.js src/index.ts
- `bun run test` — bun test --pass-with-no-tests
- `bun run lint` — bun run lint:fix
- `bun run lint:check` — biome check .
- `bun run lint:fix` — biome check --write --unsafe --only=nursery/useSortedClasses . && biome check --write .
- `bun run db:generate` — drizzle-kit generate
- `bun run db:migrate` — drizzle-kit migrate
- `bun run db:studio` — drizzle-kit studio
- `bun run clean` — rm -rf dist
- `bun run db:generate:pg` — drizzle-kit generate --config=drizzle-pg.config.ts
- `bun run db:migrate:pg` — drizzle-kit migrate --config=drizzle-pg.config.ts
- `bun run db:seed` — bun run src/db/seed.ts

## Recent Updates

- Replace eslint+prettier by biomejs to optimize speed.
- Resolve lint and build errors in workspace bundle and integrations lib.
- Test runner.
- Resolve lint/test regressions after voice capability updates.
- Phase 4 production hardening — rate limiting, security, E2E tests, versioning polish.
- Add dependency graph, webhooks, GitHub App, and PostgreSQL support (Phase 3b).

## Notes

- REST API routes are consumed by external clients — do not change paths or response shapes without versioning.
- MCP tool schemas are a protocol contract — coordinate changes with MCP clients.
- Database migrations must be backwards-compatible.


## Declared capabilities

This manifest does not declare a capability catalogue. Assess the package using its guide, import map and source.

## Catalogue metadata

```json
{
  "family": "solutions",
  "kind": "app",
  "status": "active",
  "adoptionMode": "operator-only",
  "stability": "stable",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    "."
  ],
  "examples": [],
  "replacements": [],
  "nonAdoptableRationale": "This app is published for execution by operators, not as a reusable library dependency."
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/app.registry-packs` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/registry-packs/src/index.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": null,
  "files": [
    "LICENSE",
    "README.md",
    "dist",
    "src",
    "!**/*.test.*",
    "!**/*.spec.*",
    "!**/*.tsbuildinfo"
  ],
  "publishExports": null
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- `@elysiajs/cors`: `^1.4.2`
- `@elysiajs/server-timing`: `^1.4.1`
- [@lssm-tech/lib.contracts-spec](https://lssm.co/docs/packages/lib.contracts-spec/): `workspace:^`
- `@modelcontextprotocol/sdk`: `catalog:ai`
- `drizzle-orm`: `catalog:data`
- `elysia`: `catalog:server`
- `zod`: `catalog:`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

- `pg`: `catalog:server`

### Development dependencies

- `@types/pg`: `^8.23.1`
- `drizzle-kit`: `catalog:data`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "clean": "rm -rf dist",
  "lint": "bun run lint:fix",
  "lint:fix": "node ../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../scripts/biome.cjs check --write .",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "dev": "bun run --watch src/index.ts",
  "build": "bun build --minify-whitespace --minify-syntax --target bun --outfile dist/index.js src/index.ts --external '@modelcontextprotocol/sdk' --external 'pg' --external 'drizzle-orm' --external 'drizzle-orm/*'",
  "start": "bun run ./dist/index.js",
  "db:generate": "drizzle-kit generate",
  "db:migrate": "drizzle-kit migrate",
  "db:studio": "drizzle-kit studio",
  "db:generate:pg": "drizzle-kit generate --config=drizzle-pg.config.ts",
  "db:migrate:pg": "drizzle-kit migrate --config=drizzle-pg.config.ts",
  "db:seed": "bun run src/db/seed.ts",
  "test": "bun test --pass-with-no-tests"
}
```

## Declared documentation links

- [App Registry Packs documentation](https://www.npmjs.com/package/%40lssm-tech%2Fapp.registry-packs) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fapp.registry-packs",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/app.registry-packs.txt",
  "route": "/llms/app.registry-packs",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.registry-packs.txt",
  "blobSha": "e5b7f1553dbeeb551c5d783ae0d13a6c75058b43",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```