@agentmanifest/mcp-server 0.0.0-stage → 0.1.2

package/dist/lib/check-permissions.js

@@ -0,0 +1,188 @@
+const RESTRICTION_PATTERNS = [
+    {
+        pattern: /\b(do not|don't|must not|prohibited|forbidden)\b[^.]{0,80}\b(scrape|bulk|crawl|harvest|mirror)\b/i,
+        code: 'agent_notes_usage_restriction',
+        message: 'Agent notes appear to prohibit bulk scraping or mirroring.',
+    },
+    {
+        pattern: /\b(no automated|no automation|human.?in.?the.?loop|manual approval)\b/i,
+        code: 'agent_notes_human_required',
+        message: 'Agent notes suggest human approval or non-automated use.',
+    },
+    {
+        pattern: /\b(commercial use|resale|redistribut(e|ion))\b[^.]{0,60}\b(prohibited|not permitted|forbidden)\b/i,
+        code: 'agent_notes_commercial_restriction',
+        message: 'Agent notes may restrict commercial or redistribution use.',
+    },
+];
+const ACTION_RESTRICTION_TRIGGERS = [
+    {
+        actionPattern: /\b(scrape|crawl|bulk|mirror|harvest)\b/i,
+        notesPattern: /\b(do not|don't|must not|prohibited)\b/i,
+        code: 'action_vs_notes_scraping',
+        message: 'Requested action looks like bulk/scraping while agent notes contain prohibitive language.',
+    },
+];
+export function parseAction(action) {
+    const trimmed = action.trim();
+    const urlMatch = trimmed.match(/^(GET|POST|PUT|PATCH|DELETE)\s+(https?:\/\/[^\s]+)/i);
+    if (urlMatch) {
+        try {
+            const u = new URL(urlMatch[2]);
+            return { method: urlMatch[1].toUpperCase(), path: u.pathname };
+        }
+        catch {
+            return { method: urlMatch[1].toUpperCase(), path: null };
+        }
+    }
+    const methodPath = trimmed.match(/^(GET|POST|PUT|PATCH|DELETE)\s+(\/[^\s?]*)/i);
+    if (methodPath) {
+        return { method: methodPath[1].toUpperCase(), path: methodPath[2] };
+    }
+    const pathOnly = trimmed.match(/^(\/[^\s?]+)/);
+    if (pathOnly) {
+        return { method: 'GET', path: pathOnly[1] };
+    }
+    return { method: null, path: null };
+}
+function normalizePath(path) {
+    if (path.length > 1 && path.endsWith('/')) {
+        return path.slice(0, -1);
+    }
+    return path;
+}
+function findEndpoint(manifest, method, path) {
+    if (!manifest.endpoints?.length || !path) {
+        return null;
+    }
+    const normPath = normalizePath(path);
+    const m = method?.toUpperCase() ?? null;
+    const exact = manifest.endpoints.find((ep) => normalizePath(ep.path) === normPath && (!m || ep.method.toUpperCase() === m));
+    if (exact) {
+        return exact;
+    }
+    // Template-style match: /items/{id}
+    for (const ep of manifest.endpoints) {
+        const pattern = ep.path.replace(/\{[^}]+\}/g, '[^/]+');
+        const re = new RegExp(`^${pattern}$`);
+        if (re.test(normPath) && (!m || ep.method.toUpperCase() === m)) {
+            return ep;
+        }
+    }
+    return null;
+}
+function aggregateVerdict(findings) {
+    if (findings.some((f) => f.severity === 'error')) {
+        return 'violation';
+    }
+    if (findings.some((f) => f.severity === 'warning')) {
+        return 'warning';
+    }
+    if (findings.length === 0) {
+        return 'unknown';
+    }
+    return 'compliant';
+}
+export function checkAgentPermissions(action, manifest, options = {}) {
+    const parsed = parseAction(action);
+    const findings = [];
+    const notes = manifest.agent_notes ?? '';
+    const matched = findEndpoint(manifest, parsed.method, parsed.path);
+    if (parsed.path && !matched) {
+        findings.push({
+            code: 'endpoint_not_declared',
+            severity: 'error',
+            message: `No matching endpoint in manifest for ${parsed.method ?? 'ANY'} ${parsed.path}. Agents should only call declared operations.`,
+        });
+    }
+    else if (matched) {
+        findings.push({
+            code: 'endpoint_declared',
+            severity: 'info',
+            message: `Matched declared endpoint ${matched.method} ${matched.path}.`,
+        });
+    }
+    else {
+        findings.push({
+            code: 'action_unparsed',
+            severity: 'warning',
+            message: 'Could not parse HTTP method/path from action. Pass values like "POST /baking/validate-mix" or "GET https://api.example.com/health".',
+        });
+    }
+    if (manifest.authentication?.required) {
+        if (options.intends_unauthenticated) {
+            findings.push({
+                code: 'auth_required',
+                severity: 'error',
+                message: `Manifest requires authentication (${manifest.authentication.type ?? 'credentials'}). ${manifest.authentication.instructions ?? ''}`.trim(),
+            });
+        }
+        else {
+            findings.push({
+                code: 'auth_required',
+                severity: 'warning',
+                message: `Authentication is required (${manifest.authentication.type}). Ensure credentials are included per manifest instructions.`,
+            });
+        }
+    }
+    const payment = manifest.payment;
+    const paidPricing = manifest.pricing?.model &&
+        !['free', 'unknown'].includes(manifest.pricing.model);
+    if (payment && payment.onboarding?.url && !options.payment_onboarded) {
+        findings.push({
+            code: 'payment_onboarding',
+            severity: 'warning',
+            message: `Payment block present; complete onboarding at ${payment.onboarding.url} before paid usage.`,
+        });
+    }
+    else if (paidPricing && !payment && !options.payment_onboarded) {
+        findings.push({
+            code: 'pricing_paid',
+            severity: 'info',
+            message: `Pricing model is "${manifest.pricing?.model}"; confirm billing terms in agent_notes before high-volume use.`,
+        });
+    }
+    if (manifest.rate_limits?.requests_per_minute || manifest.rate_limits?.requests_per_day) {
+        findings.push({
+            code: 'rate_limits',
+            severity: 'info',
+            message: `Rate limits apply (rpm: ${manifest.rate_limits.requests_per_minute ?? 'n/a'}, rpd: ${manifest.rate_limits.requests_per_day ?? 'n/a'}).`,
+        });
+    }
+    const termsUrl = payment?.refund_policy?.terms_url;
+    if (termsUrl) {
+        findings.push({
+            code: 'terms_url',
+            severity: 'info',
+            message: `Refund/terms documented at ${termsUrl}.`,
+        });
+    }
+    for (const rule of RESTRICTION_PATTERNS) {
+        if (rule.pattern.test(notes)) {
+            findings.push({
+                code: rule.code,
+                severity: 'warning',
+                message: rule.message,
+            });
+        }
+    }
+    for (const rule of ACTION_RESTRICTION_TRIGGERS) {
+        if (rule.actionPattern.test(action) && rule.notesPattern.test(notes)) {
+            findings.push({
+                code: rule.code,
+                severity: 'error',
+                message: rule.message,
+            });
+        }
+    }
+    const verdict = aggregateVerdict(findings);
+    const compliant = verdict === 'compliant' || verdict === 'warning';
+    return {
+        verdict,
+        compliant,
+        action: { raw: action, method: parsed.method, path: parsed.path },
+        findings,
+        matched_endpoint: matched,
+    };
+}
+//# sourceMappingURL=check-permissions.js.map

package/dist/lib/check-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-permissions.js","sourceRoot":"","sources":["../../src/lib/check-permissions.ts"],"names":[],"mappings":"AAEA,MAAM,oBAAoB,GAA8D;IACtF;QACE,OAAO,EAAE,mGAAmG;QAC5G,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,4DAA4D;KACtE;IACD;QACE,OAAO,EAAE,wEAAwE;QACjF,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,0DAA0D;KACpE;IACD;QACE,OAAO,EAAE,mGAAmG;QAC5G,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,4DAA4D;KACtE;CACF,CAAC;AAEF,MAAM,2BAA2B,GAC/B;IACE;QACE,aAAa,EAAE,yCAAyC;QACxD,YAAY,EAAE,yCAAyC;QACvD,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,2FAA2F;KACrG;CACF,CAAC;AAEJ,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACtF,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,SAAS,YAAY,CACnB,QAAqB,EACrB,MAAqB,EACrB,IAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;IAExC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CACnC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CACrF,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA2C;IACnE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AASD,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,QAAqB,EACrB,UAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAEnE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,wCAAwC,MAAM,CAAC,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,gDAAgD;SACvI,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,6BAA6B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,GAAG;SACxE,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,OAAO,EACL,qIAAqI;SACxI,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,qCAAqC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,aAAa,MAAM,QAAQ,CAAC,cAAc,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;aACrJ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,+BAA+B,QAAQ,CAAC,cAAc,CAAC,IAAI,+DAA+D;aACpI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,WAAW,GACf,QAAQ,CAAC,OAAO,EAAE,KAAK;QACvB,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAExD,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,iDAAiD,OAAO,CAAC,UAAU,CAAC,GAAG,qBAAqB;SACtG,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,WAAW,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,qBAAqB,QAAQ,CAAC,OAAO,EAAE,KAAK,iEAAiE;SACvH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,WAAW,EAAE,mBAAmB,IAAI,QAAQ,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACxF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,2BAA2B,QAAQ,CAAC,WAAW,CAAC,mBAAmB,IAAI,KAAK,UAAU,QAAQ,CAAC,WAAW,CAAC,gBAAgB,IAAI,KAAK,IAAI;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,8BAA8B,QAAQ,GAAG;SACnD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,2BAA2B,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,SAAS,CAAC;IAEnE,OAAO;QACL,OAAO;QACP,SAAS;QACT,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QACjE,QAAQ;QACR,gBAAgB,EAAE,OAAO;KAC1B,CAAC;AACJ,CAAC"}

package/dist/lib/fetch-manifest.d.ts

@@ -0,0 +1,5 @@
+import type { FetchManifestResult } from './types.js';
+/** RFC 8615 primary path plus common publisher fallbacks. */
+export declare const MANIFEST_PATH_CANDIDATES: readonly ["/.well-known/agent-manifest.json", "/.well-known/amp.json", "/agent-manifest.json"];
+export declare function fetchManifestByDomain(domain: string): Promise<FetchManifestResult>;
+//# sourceMappingURL=fetch-manifest.d.ts.map

package/dist/lib/fetch-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-manifest.d.ts","sourceRoot":"","sources":["../../src/lib/fetch-manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAe,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEnE,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,gGAI3B,CAAC;AAkDX,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwBxF"}

package/dist/lib/fetch-manifest.js

@@ -0,0 +1,74 @@
+import { resolveManifestUrl } from './resolve-manifest-url.js';
+/** RFC 8615 primary path plus common publisher fallbacks. */
+export const MANIFEST_PATH_CANDIDATES = [
+    '/.well-known/agent-manifest.json',
+    '/.well-known/amp.json',
+    '/agent-manifest.json',
+];
+function normalizeDomain(domain) {
+    const trimmed = domain.trim().replace(/\/+$/, '');
+    const withoutScheme = trimmed.replace(/^https?:\/\//i, '');
+    const host = withoutScheme.split('/')[0] ?? withoutScheme;
+    return host;
+}
+function originFromDomain(domain) {
+    const host = normalizeDomain(domain);
+    return `https://${host}`;
+}
+function manifestUrlsForOrigin(origin) {
+    const base = origin.endsWith('/') ? origin.slice(0, -1) : origin;
+    return MANIFEST_PATH_CANDIDATES.map((p) => `${base}${p}`);
+}
+function getFetchTimeoutMs() {
+    const raw = process.env.AMP_FETCH_TIMEOUT_MS;
+    const n = raw ? Number.parseInt(raw, 10) : 15_000;
+    return Number.isFinite(n) && n > 0 ? n : 15_000;
+}
+async function fetchJson(url) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), getFetchTimeoutMs());
+    try {
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers: { Accept: 'application/json' },
+        });
+        if (!response.ok) {
+            return { ok: false, status: response.status, error: `HTTP ${response.status}` };
+        }
+        const contentType = response.headers.get('content-type') ?? '';
+        if (!contentType.includes('json')) {
+            return { ok: false, error: `Unexpected Content-Type: ${contentType || '(none)'}` };
+        }
+        const data = (await response.json());
+        return { ok: true, data };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { ok: false, error: message };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+export async function fetchManifestByDomain(domain) {
+    const host = normalizeDomain(domain);
+    const origin = originFromDomain(host);
+    const canonical = resolveManifestUrl(origin);
+    const tried = manifestUrlsForOrigin(origin);
+    const errors = [];
+    for (const url of tried) {
+        const result = await fetchJson(url);
+        if (result.ok) {
+            return {
+                domain: host,
+                origin,
+                manifest_url: url,
+                tried_urls: tried,
+                manifest: result.data,
+            };
+        }
+        errors.push(`${url}: ${result.error}`);
+    }
+    throw new Error(`Could not fetch an AMP manifest for ${host}. Tried ${tried.length} URL(s). Canonical: ${canonical}. Details: ${errors.join(' | ')}`);
+}
+//# sourceMappingURL=fetch-manifest.js.map

package/dist/lib/fetch-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-manifest.js","sourceRoot":"","sources":["../../src/lib/fetch-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAG/D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,kCAAkC;IAClC,uBAAuB;IACvB,sBAAsB;CACd,CAAC;AAEX,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,WAAW,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjE,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,WAAW,IAAI,QAAQ,EAAE,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAc;IACxD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM;gBACN,YAAY,EAAE,GAAG;gBACjB,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,MAAM,CAAC,IAAI;aACtB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,WAAW,KAAK,CAAC,MAAM,uBAAuB,SAAS,cAAc,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACrI,CAAC;AACJ,CAAC"}

package/dist/lib/resolve-manifest-url.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Origin-level manifest URL per RFC 8615 (matches @agentmanifest/validator).
+ */
+export declare function resolveManifestUrl(url: string): string;
+//# sourceMappingURL=resolve-manifest-url.d.ts.map

package/dist/lib/resolve-manifest-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-manifest-url.d.ts","sourceRoot":"","sources":["../../src/lib/resolve-manifest-url.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGtD"}

package/dist/lib/resolve-manifest-url.js

@@ -0,0 +1,8 @@
+/**
+ * Origin-level manifest URL per RFC 8615 (matches @agentmanifest/validator).
+ */
+export function resolveManifestUrl(url) {
+    const withScheme = /^https?:\/\//i.test(url) ? url : `https://${url}`;
+    return new URL('/.well-known/agent-manifest.json', withScheme).toString();
+}
+//# sourceMappingURL=resolve-manifest-url.js.map

package/dist/lib/resolve-manifest-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-manifest-url.js","sourceRoot":"","sources":["../../src/lib/resolve-manifest-url.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;IACtE,OAAO,IAAI,GAAG,CAAC,kCAAkC,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC5E,CAAC"}

package/dist/lib/schemas.d.ts

@@ -0,0 +1,3 @@
+export declare const CURRENT_SPEC_VERSION = "agentmanifest-0.3";
+export declare const SCHEMAS: Record<string, object>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/lib/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/lib/schemas.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AAExD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAG1C,CAAC"}

package/dist/lib/schemas.js

@@ -0,0 +1,8 @@
+import schemaV02 from '../../schemas/v0.2/manifest.json' with { type: 'json' };
+import schemaV03 from '../../schemas/v0.3/manifest.json' with { type: 'json' };
+export const CURRENT_SPEC_VERSION = 'agentmanifest-0.3';
+export const SCHEMAS = {
+    'agentmanifest-0.2': schemaV02,
+    'agentmanifest-0.3': schemaV03,
+};
+//# sourceMappingURL=schemas.js.map

package/dist/lib/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/lib/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,kCAAkC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC/E,OAAO,SAAS,MAAM,kCAAkC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAExD,MAAM,CAAC,MAAM,OAAO,GAA2B;IAC7C,mBAAmB,EAAE,SAAS;IAC9B,mBAAmB,EAAE,SAAS;CAC/B,CAAC"}

package/dist/lib/types.d.ts

@@ -0,0 +1,84 @@
+/** Minimal manifest shape for permission checks (AMP v0.2/v0.3). */
+export interface AmpManifest {
+    spec_version?: string;
+    name?: string;
+    version?: string;
+    description?: string;
+    homepage?: string;
+    endpoints?: Array<{
+        path: string;
+        method: string;
+        description: string;
+        parameters?: unknown;
+        response_description?: string;
+        cost_hint?: {
+            unit: string;
+            estimated_price: string;
+            currency: string;
+            notes?: string;
+        };
+    }>;
+    authentication?: {
+        required?: boolean;
+        type?: string | null;
+        instructions?: string | null;
+    };
+    pricing?: {
+        model?: string;
+        free_tier?: unknown;
+        paid_tier?: unknown;
+    };
+    payment?: null | {
+        model?: string;
+        onboarding?: {
+            url?: string;
+        };
+        budget_controls?: Record<string, unknown>;
+        refund_policy?: {
+            terms_url?: string | null;
+        };
+    };
+    rate_limits?: {
+        requests_per_minute?: number | null;
+        requests_per_day?: number | null;
+        burst?: number | null;
+        notes?: string | null;
+    };
+    agent_notes?: string;
+    contact?: Record<string, unknown>;
+}
+export interface FetchManifestResult {
+    domain: string;
+    origin: string;
+    manifest_url: string;
+    tried_urls: string[];
+    manifest: AmpManifest;
+}
+export interface SyntaxValidationResult {
+    valid: boolean;
+    spec_version: string | null;
+    schema_checked: string | null;
+    errors: string[];
+    success_token: string | null;
+}
+export type PermissionVerdict = 'compliant' | 'violation' | 'warning' | 'unknown';
+export interface PermissionCheckResult {
+    verdict: PermissionVerdict;
+    compliant: boolean;
+    action: {
+        raw: string;
+        method: string | null;
+        path: string | null;
+    };
+    findings: Array<{
+        code: string;
+        severity: 'error' | 'warning' | 'info';
+        message: string;
+    }>;
+    matched_endpoint: {
+        path: string;
+        method: string;
+        description: string;
+    } | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,SAAS,CAAC,EAAE;YACV,IAAI,EAAE,MAAM,CAAC;YACb,eAAe,EAAE,MAAM,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC;YACjB,KAAK,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;KACH,CAAC,CAAC;IACH,cAAc,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,OAAO,CAAC,EAAE,IAAI,GAAG;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,aAAa,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;KACrB,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,IAAI,CAAC;CACV"}

package/dist/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":""}

package/dist/lib/validate-syntax.d.ts

@@ -0,0 +1,3 @@
+import type { SyntaxValidationResult } from './types.js';
+export declare function validateManifestSyntax(manifestInput: string | Record<string, unknown>): SyntaxValidationResult;
+//# sourceMappingURL=validate-syntax.d.ts.map

package/dist/lib/validate-syntax.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-syntax.d.ts","sourceRoot":"","sources":["../../src/lib/validate-syntax.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAsBzD,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,sBAAsB,CAyC9G"}

package/dist/lib/validate-syntax.js

@@ -0,0 +1,52 @@
+import AjvModule from 'ajv';
+import addFormatsModule from 'ajv-formats';
+const Ajv = AjvModule.default ?? AjvModule;
+const addFormats = addFormatsModule.default ?? addFormatsModule;
+import { CURRENT_SPEC_VERSION, SCHEMAS } from './schemas.js';
+const ajv = new Ajv({ allErrors: true, strict: false });
+addFormats(ajv);
+const validators = Object.fromEntries(Object.entries(SCHEMAS).map(([version, schema]) => [version, ajv.compile(schema)]));
+const SUPPORTED = Object.keys(SCHEMAS);
+function parseManifestInput(input) {
+    if (typeof input === 'string') {
+        try {
+            return JSON.parse(input);
+        }
+        catch (err) {
+            throw new Error(`Invalid JSON string: ${err.message}`);
+        }
+    }
+    return input;
+}
+export function validateManifestSyntax(manifestInput) {
+    const manifest = parseManifestInput(manifestInput);
+    const specVersion = typeof manifest.spec_version === 'string' ? manifest.spec_version : null;
+    const version = specVersion && validators[specVersion] ? specVersion : CURRENT_SPEC_VERSION;
+    const validate = validators[version];
+    const valid = validate(manifest);
+    if (!valid) {
+        const errors = validate.errors?.map((e) => {
+            const path = e.instancePath || '/';
+            return `${path} ${e.message ?? 'invalid'}`.trim();
+        }) ?? ['Unknown schema error'];
+        if (specVersion && !SUPPORTED.includes(specVersion)) {
+            errors.unshift(`Unsupported spec_version "${specVersion}". Supported: ${SUPPORTED.join(', ')}.`);
+        }
+        return {
+            valid: false,
+            spec_version: specVersion,
+            schema_checked: version,
+            errors,
+            success_token: null,
+        };
+    }
+    const token = `amp-schema-valid:${version}:${typeof manifest.name === 'string' ? manifest.name : 'unknown'}`;
+    return {
+        valid: true,
+        spec_version: specVersion ?? version,
+        schema_checked: version,
+        errors: [],
+        success_token: token,
+    };
+}
+//# sourceMappingURL=validate-syntax.js.map

package/dist/lib/validate-syntax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-syntax.js","sourceRoot":"","sources":["../../src/lib/validate-syntax.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,KAAK,CAAC;AAC5B,OAAO,gBAAgB,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC;AAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,IAAI,gBAAgB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,UAAU,CAAC,GAAG,CAAC,CAAC;AAEhB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CACnF,CAAC;AAEF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAEvC,SAAS,kBAAkB,CAAC,KAAuC;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,aAA+C;IACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3E,MAAM,OAAO,GACX,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GACV,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAA8C,EAAE,EAAE;YACtE,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC;YACnC,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAEjC,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,OAAO,CACZ,6BAA6B,WAAW,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,OAAO;YACvB,MAAM;YACN,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,OAAO,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAE7G,OAAO;QACL,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,WAAW,IAAI,OAAO;QACpC,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,EAAE;QACV,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,64 @@
 {
   "name": "@agentmanifest/mcp-server",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.2",
+  "mcpName": "com.agent-manifest/amp-mcp",
+  "description": "Official MCP server for the Agent Manifest Protocol (AMP) — discover, validate, and check agent permissions against agent-manifest.json",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "amp-mcp": "./dist/index.js",
+    "amp-mcp-http": "./dist/http.js"
+  },
+  "files": [
+    "dist",
+    "schemas",
+    "smithery.yaml",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/http.ts",
+    "dev:stdio": "tsx src/index.ts",
+    "start": "node dist/http.js",
+    "start:stdio": "node dist/index.js",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "agent-manifest",
+    "amp",
+    "agent-manifest-protocol",
+    "smithery"
+  ],
+  "author": "Brandon Weber <brandon@agent-manifest.com>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/AMProtocol/AMP.git",
+    "directory": "amp-mcp"
+  },
+  "homepage": "https://agent-manifest.com",
+  "bugs": {
+    "url": "https://github.com/AMProtocol/AMP/issues"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.32.0",
+    "ajv": "^8.12.0",
+    "ajv-formats": "^2.1.1",
+    "express": "^4.21.2",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.10.6",
+    "tsx": "^4.7.0",
+    "typescript": "^5.3.3",
+    "vitest": "^4.0.18"
+  }
+}