feat(phase-4): WS4 — Agent Marketplace (public registry, pagination, filters)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/app.ts

@@ -20,6 +20,7 @@ import { OrgRepository } from './repositories/OrgRepository.js';
 
 import { AuditService } from './services/AuditService.js';
 import { AgentService } from './services/AgentService.js';
+import { MarketplaceService } from './services/MarketplaceService.js';
 import { CredentialService } from './services/CredentialService.js';
 import { OAuth2Service } from './services/OAuth2Service.js';
 import { OrgService } from './services/OrgService.js';
@@ -33,6 +34,7 @@ import { WebhookDeliveryWorker } from './workers/WebhookDeliveryWorker.js';
 import { createKafkaProducer } from './adapters/KafkaAdapter.js';
 
 import { AgentController } from './controllers/AgentController.js';
+import { MarketplaceController } from './controllers/MarketplaceController.js';
 import { TokenController } from './controllers/TokenController.js';
 import { CredentialController } from './controllers/CredentialController.js';
 import { AuditController } from './controllers/AuditController.js';
@@ -44,6 +46,7 @@ import { WebhookController } from './controllers/WebhookController.js';
 import { ComplianceController } from './controllers/ComplianceController.js';
 
 import { createAgentsRouter } from './routes/agents.js';
+import { createMarketplaceRouter } from './routes/marketplace.js';
 import { createTokenRouter } from './routes/token.js';
 import { createCredentialsRouter } from './routes/credentials.js';
 import { createAuditRouter } from './routes/audit.js';
@@ -176,6 +179,7 @@ export async function createApp(): Promise<Application> {
   const auditService = new AuditService(auditRepo);
   const didService = new DIDService(pool, vaultClient, redis as RedisClientType, encryptionService);
   const agentService = new AgentService(agentRepo, credentialRepo, auditService, didService, eventPublisher);
+  const marketplaceService = new MarketplaceService(agentRepo);
   const credentialService = new CredentialService(credentialRepo, agentRepo, auditService, vaultClient, eventPublisher, encryptionService);
   const orgService = new OrgService(orgRepo, agentRepo);
 
@@ -221,6 +225,7 @@ export async function createApp(): Promise<Application> {
   const federationService = new FederationService(pool, redis as RedisClientType);
   const federationController = new FederationController(federationService);
   const webhookController = new WebhookController(webhookService);
+  const marketplaceController = new MarketplaceController(marketplaceService);
 
   // ────────────────────────────────────────────────────────────────
   // Compliance services and background jobs (SOC 2 Type II)
@@ -270,6 +275,7 @@ export async function createApp(): Promise<Application> {
   app.use(`${API_BASE}`, createFederationRouter(federationController, authMiddleware, opaMiddleware));
   app.use(`${API_BASE}/webhooks`, createWebhooksRouter(webhookController, authMiddleware, opaMiddleware));
   app.use(`${API_BASE}`, createComplianceRouter(complianceController));
+  app.use(`${API_BASE}/marketplace`, createMarketplaceRouter(marketplaceController));
 
   // ────────────────────────────────────────────────────────────────
   // Dashboard static assets (served from dashboard/dist/)