@agentxm/client-core 0.8.0 → 0.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentxm/client-core",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Core library for the axm agent extension manager. Unstable and unsupported — use the axm.sh CLI.",
   "type": "module",
   "license": "MIT",
@@ -27,6 +27,10 @@
       "types": "./dist/src/unstable/version-constraints/version-constraints.d.ts",
       "default": "./dist/src/unstable/version-constraints/version-constraints.js"
     },
+    "./unstable/package-urls": {
+      "types": "./dist/src/unstable/package-urls/index.d.ts",
+      "default": "./dist/src/unstable/package-urls/index.js"
+    },
     "./unstable/branding": {
       "types": "./dist/src/unstable/branding.d.ts",
       "default": "./dist/src/unstable/branding.js"
@@ -207,10 +211,12 @@
     "fflate": "^0.8.2",
     "gray-matter": "^4.0.3",
     "jsonc-parser": "^3.3.1",
+    "marked": "^18.0.3",
     "packageurl-js": "^2.0.1",
-    "semver": "^7.8.0",
     "proper-lockfile": "^4.1.2",
-    "simple-git": "^3.36.0"
+    "semver": "^7.8.0",
+    "simple-git": "^3.36.0",
+    "spdx-expression-parse": "3.0.1"
   },
   "devDependencies": {
     "@effect/openapi-generator": "4.0.0-beta.64",
@@ -218,10 +224,11 @@
     "@types/bun": "^1.3.13",
     "@types/proper-lockfile": "^4.1.4",
     "@types/semver": "^7.5.8",
+    "@types/spdx-expression-parse": "4.0.0",
     "swagger2openapi": "^7.0.8",
     "typescript": "^5.9.3",
     "vitest": "^4.1.5",
     "yaml": "^2.8.4",
-    "@agentxm/client-utils": "^0.8.0"
+    "@agentxm/client-utils": "^0.10.0"
   }
 }

package/site-content/__generated__/schemas/axm-lock.schema.json

@@ -152,6 +152,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": ["type", "owner", "repo", "agents", "installedAt", "updatedAt"],
@@ -197,6 +211,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": ["type", "owner", "repo", "agents", "installedAt", "updatedAt"],
@@ -242,6 +270,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": ["type", "owner", "repo", "agents", "installedAt", "updatedAt"],
@@ -288,6 +330,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": [
@@ -340,6 +396,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": ["type", "url", "agents", "installedAt", "updatedAt"],
@@ -372,6 +442,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": ["type", "path", "agents", "installedAt", "updatedAt"],
@@ -408,6 +492,20 @@
                       },
                       { "type": "null" }
                     ]
+                  },
+                  "universalArtifact": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": { "type": "string" },
+                          "integrity": { "type": "string" }
+                        },
+                        "required": ["path", "integrity"],
+                        "additionalProperties": false
+                      },
+                      { "type": "null" }
+                    ]
                   }
                 },
                 "required": [

package/site-content/__generated__/schemas/command.schema.json

@@ -24,6 +24,114 @@
         }
       ]
     },
+    "Repository": {
+      "anyOf": [
+        {
+          "type": "string",
+          "examples": ["https://github.com/acme/code-review", "github:acme/code-review"],
+          "format": "uri-reference"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Version control system (e.g., `git`).",
+                      "examples": ["git"]
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            },
+            "url": {
+              "type": "string",
+              "allOf": [
+                {
+                  "minLength": 1,
+                  "description": "Repository URL.",
+                  "examples": ["https://github.com/acme/code-review"],
+                  "format": "uri"
+                }
+              ]
+            },
+            "directory": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Subdirectory within the repository, for monorepo publishers.",
+                      "examples": ["packages/code-review"]
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            }
+          },
+          "required": ["url"],
+          "additionalProperties": false
+        }
+      ],
+      "title": "Repository",
+      "description": "Source repository for this extension. Accepts a URL string (or `host:owner/repo` shorthand) or an object with `type`, `url`, and optional `directory`."
+    },
+    "Bugs": {
+      "anyOf": [
+        {
+          "type": "string",
+          "examples": ["https://github.com/acme/code-review/issues"],
+          "format": "uri"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "url": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Issue tracker URL.",
+                      "examples": ["https://github.com/acme/code-review/issues"],
+                      "format": "uri"
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            },
+            "email": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Contact email for bug reports.",
+                      "examples": ["bugs@acme.dev"],
+                      "format": "email"
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            }
+          },
+          "additionalProperties": false
+        }
+      ],
+      "title": "Bugs",
+      "description": "Where to report bugs against this extension. Accepts a URL string or an object with optional `url` and `email`."
+    },
     "Author": {
       "type": "object",
       "properties": {
@@ -36,17 +144,38 @@
       "title": "Author",
       "description": "A person credited as a creator or maintainer of this extension."
     },
-    "PackageUrl": {
+    "PackageIdentityPurl": {
       "type": "string",
       "allOf": [
+        { "minLength": 1 },
         {
           "pattern": "^[Pp][Kk][Gg]:[a-zA-Z][a-zA-Z0-9.+-]*\\/.+$",
-          "title": "Package URL",
-          "description": "A Package URL (purl) string identifying a package across ecosystems (e.g. pkg:npm/react@18.2.0).",
-          "examples": ["pkg:npm/react@18.2.0", "pkg:pypi/requests@2.31.0", "pkg:cargo/serde@1.0"]
+          "title": "Package Identity Purl",
+          "description": "A Package URL (purl) identity for a companion package. Companion package purls are identities, not pins: omit the purl @version segment and put compatibility constraints in versionRange.",
+          "examples": ["pkg:npm/react", "pkg:pypi/requests", "pkg:cargo/serde"]
         }
       ]
     },
+    "VersRange": {
+      "type": "string",
+      "allOf": [
+        {
+          "minLength": 1,
+          "examples": ["vers:npm/>=18.0.0|<19.0.0", "vers:pypi/>=2.31.0", "vers:cargo/>=1.0.0"]
+        }
+      ]
+    },
+    "CompanionPackage": {
+      "type": "object",
+      "properties": {
+        "purl": { "$ref": "#/definitions/PackageIdentityPurl" },
+        "versionRange": { "anyOf": [{ "$ref": "#/definitions/VersRange" }, { "type": "null" }] }
+      },
+      "required": ["purl"],
+      "additionalProperties": false,
+      "title": "Companion Package",
+      "description": "A companion package purl identity with an optional VERS compatibility range."
+    },
     "PackSpec": {
       "type": "string",
       "allOf": [
@@ -96,16 +225,7 @@
             { "type": "null" }
           ]
         },
-        "repository": {
-          "anyOf": [
-            {
-              "type": "string",
-              "examples": ["https://github.com/acme/code-review"],
-              "format": "uri"
-            },
-            { "type": "null" }
-          ]
-        },
+        "repository": { "anyOf": [{ "$ref": "#/definitions/Repository" }, { "type": "null" }] },
         "homepage": {
           "anyOf": [
             { "type": "string", "examples": ["https://acme.dev/code-review"], "format": "uri" },
@@ -113,21 +233,18 @@
           ]
         },
         "license": {
-          "anyOf": [
-            { "type": "string", "allOf": [{ "minLength": 1, "examples": ["MIT", "Apache-2.0"] }] },
-            { "type": "null" }
-          ]
-        },
-        "bugs": {
           "anyOf": [
             {
               "type": "string",
-              "examples": ["https://github.com/acme/code-review/issues"],
-              "format": "uri"
+              "title": "License",
+              "description": "SPDX license expression, or `UNLICENSED` for proprietary code.",
+              "examples": ["MIT", "Apache-2.0", "MIT OR Apache-2.0", "UNLICENSED"],
+              "format": "spdx-expression"
             },
             { "type": "null" }
           ]
         },
+        "bugs": { "anyOf": [{ "$ref": "#/definitions/Bugs" }, { "type": "null" }] },
         "authors": {
           "anyOf": [
             { "type": "array", "items": { "$ref": "#/definitions/Author" } },
@@ -138,8 +255,8 @@
           "anyOf": [
             {
               "type": "array",
-              "description": "External ecosystem packages this extension is designed to work with (e.g. the npm or PyPI package an MCP server wraps), identified by Package URL (purl).",
-              "items": { "$ref": "#/definitions/PackageUrl" }
+              "description": "External ecosystem packages this extension is designed to work with, declared as identity Package URLs with optional VERS compatibility ranges.",
+              "items": { "$ref": "#/definitions/CompanionPackage" }
             },
             { "type": "null" }
           ]

package/site-content/__generated__/schemas/mcp-server.schema.json

@@ -24,6 +24,114 @@
         }
       ]
     },
+    "Repository": {
+      "anyOf": [
+        {
+          "type": "string",
+          "examples": ["https://github.com/acme/code-review", "github:acme/code-review"],
+          "format": "uri-reference"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "type": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Version control system (e.g., `git`).",
+                      "examples": ["git"]
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            },
+            "url": {
+              "type": "string",
+              "allOf": [
+                {
+                  "minLength": 1,
+                  "description": "Repository URL.",
+                  "examples": ["https://github.com/acme/code-review"],
+                  "format": "uri"
+                }
+              ]
+            },
+            "directory": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Subdirectory within the repository, for monorepo publishers.",
+                      "examples": ["packages/code-review"]
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            }
+          },
+          "required": ["url"],
+          "additionalProperties": false
+        }
+      ],
+      "title": "Repository",
+      "description": "Source repository for this extension. Accepts a URL string (or `host:owner/repo` shorthand) or an object with `type`, `url`, and optional `directory`."
+    },
+    "Bugs": {
+      "anyOf": [
+        {
+          "type": "string",
+          "examples": ["https://github.com/acme/code-review/issues"],
+          "format": "uri"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "url": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Issue tracker URL.",
+                      "examples": ["https://github.com/acme/code-review/issues"],
+                      "format": "uri"
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            },
+            "email": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "allOf": [
+                    {
+                      "minLength": 1,
+                      "description": "Contact email for bug reports.",
+                      "examples": ["bugs@acme.dev"],
+                      "format": "email"
+                    }
+                  ]
+                },
+                { "type": "null" }
+              ]
+            }
+          },
+          "additionalProperties": false
+        }
+      ],
+      "title": "Bugs",
+      "description": "Where to report bugs against this extension. Accepts a URL string or an object with optional `url` and `email`."
+    },
     "Author": {
       "type": "object",
       "properties": {
@@ -36,17 +144,38 @@
       "title": "Author",
       "description": "A person credited as a creator or maintainer of this extension."
     },
-    "PackageUrl": {
+    "PackageIdentityPurl": {
       "type": "string",
       "allOf": [
+        { "minLength": 1 },
         {
           "pattern": "^[Pp][Kk][Gg]:[a-zA-Z][a-zA-Z0-9.+-]*\\/.+$",
-          "title": "Package URL",
-          "description": "A Package URL (purl) string identifying a package across ecosystems (e.g. pkg:npm/react@18.2.0).",
-          "examples": ["pkg:npm/react@18.2.0", "pkg:pypi/requests@2.31.0", "pkg:cargo/serde@1.0"]
+          "title": "Package Identity Purl",
+          "description": "A Package URL (purl) identity for a companion package. Companion package purls are identities, not pins: omit the purl @version segment and put compatibility constraints in versionRange.",
+          "examples": ["pkg:npm/react", "pkg:pypi/requests", "pkg:cargo/serde"]
         }
       ]
     },
+    "VersRange": {
+      "type": "string",
+      "allOf": [
+        {
+          "minLength": 1,
+          "examples": ["vers:npm/>=18.0.0|<19.0.0", "vers:pypi/>=2.31.0", "vers:cargo/>=1.0.0"]
+        }
+      ]
+    },
+    "CompanionPackage": {
+      "type": "object",
+      "properties": {
+        "purl": { "$ref": "#/definitions/PackageIdentityPurl" },
+        "versionRange": { "anyOf": [{ "$ref": "#/definitions/VersRange" }, { "type": "null" }] }
+      },
+      "required": ["purl"],
+      "additionalProperties": false,
+      "title": "Companion Package",
+      "description": "A companion package purl identity with an optional VERS compatibility range."
+    },
     "PackSpec": {
       "type": "string",
       "allOf": [
@@ -96,16 +225,7 @@
             { "type": "null" }
           ]
         },
-        "repository": {
-          "anyOf": [
-            {
-              "type": "string",
-              "examples": ["https://github.com/acme/code-review"],
-              "format": "uri"
-            },
-            { "type": "null" }
-          ]
-        },
+        "repository": { "anyOf": [{ "$ref": "#/definitions/Repository" }, { "type": "null" }] },
         "homepage": {
           "anyOf": [
             { "type": "string", "examples": ["https://acme.dev/code-review"], "format": "uri" },
@@ -113,21 +233,18 @@
           ]
         },
         "license": {
-          "anyOf": [
-            { "type": "string", "allOf": [{ "minLength": 1, "examples": ["MIT", "Apache-2.0"] }] },
-            { "type": "null" }
-          ]
-        },
-        "bugs": {
           "anyOf": [
             {
               "type": "string",
-              "examples": ["https://github.com/acme/code-review/issues"],
-              "format": "uri"
+              "title": "License",
+              "description": "SPDX license expression, or `UNLICENSED` for proprietary code.",
+              "examples": ["MIT", "Apache-2.0", "MIT OR Apache-2.0", "UNLICENSED"],
+              "format": "spdx-expression"
             },
             { "type": "null" }
           ]
         },
+        "bugs": { "anyOf": [{ "$ref": "#/definitions/Bugs" }, { "type": "null" }] },
         "authors": {
           "anyOf": [
             { "type": "array", "items": { "$ref": "#/definitions/Author" } },
@@ -138,8 +255,8 @@
           "anyOf": [
             {
               "type": "array",
-              "description": "External ecosystem packages this extension is designed to work with (e.g. the npm or PyPI package an MCP server wraps), identified by Package URL (purl).",
-              "items": { "$ref": "#/definitions/PackageUrl" }
+              "description": "External ecosystem packages this extension is designed to work with, declared as identity Package URLs with optional VERS compatibility ranges.",
+              "items": { "$ref": "#/definitions/CompanionPackage" }
             },
             { "type": "null" }
           ]