@geraldmaron/construct 1.4.1 → 1.5.0

package/lib/extensions/index.mjs

@@ -0,0 +1,27 @@
+/**
+ * lib/extensions/index.mjs — public API for the extension manifest system.
+ *
+ * Re-exports all symbols from the three extension sub-modules so consumers
+ * can import from a single entry point:
+ *
+ *   import { validateManifest, loadManifestsFromDir, MANIFEST_KINDS } from './extensions/index.mjs';
+ */
+
+export {
+  MANIFEST_KINDS,
+  REQUIRED_FIELDS,
+  OPTIONAL_FIELDS,
+  COMPAT_VERSION,
+  ALLOWED_SECRET_ENV_PREFIXES,
+  ESCALATION_SENSITIVE_KINDS,
+  KNOWN_REQUESTABLE_TOOL_GRANTS,
+  BUILTIN_SPECIALIST_IDS,
+} from './manifest-schema.mjs';
+
+export { validateManifest } from './validate.mjs';
+
+export {
+  loadManifestsFromDir,
+  mergeManifests,
+  resolveManifestDirs,
+} from './loader.mjs';

package/lib/extensions/loader.mjs

@@ -0,0 +1,120 @@
+/**
+ * lib/extensions/loader.mjs — extension manifest directory loader and merger.
+ *
+ * Three manifest tiers exist: builtin (shipped with Construct), user (in
+ * ~/.config/construct/providers/), and project (in .cx/providers/). Project
+ * manifests take highest precedence; user manifests override builtin.
+ *
+ * `loadManifestsFromDir` reads every *.manifest.json in a directory and
+ * validates each one. Errors are collected without throwing. `mergeManifests`
+ * merges the three tiers by id. `resolveManifestDirs` returns the canonical
+ * paths for each tier.
+ */
+
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { validateManifest } from './validate.mjs';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+/** Root of the Construct package (parent of lib/). */
+const PACKAGE_ROOT = resolve(__dirname, '..', '..');
+
+/**
+ * loadManifestsFromDir(dirPath, { strict } = {})
+ *
+ * Reads all `*.manifest.json` files in dirPath, validates each one, and
+ * returns a result object. Files that fail JSON parsing or validation are
+ * collected in `errors`; valid manifests are collected in `manifests`.
+ *
+ * When `strict` is true, manifests are validated with the strict-mode
+ * hardening checks (unknown field rejection, env key allowlist, etc.).
+ *
+ * @param {string} dirPath - Absolute path to search.
+ * @param {{ strict?: boolean }} [opts]
+ * @returns {{ manifests: object[], errors: string[] }}
+ */
+export function loadManifestsFromDir(dirPath, { strict = false } = {}) {
+  const manifests = [];
+  const errors = [];
+
+  if (!existsSync(dirPath)) {
+    return { manifests, errors };
+  }
+
+  let entries;
+  try {
+    entries = readdirSync(dirPath, { withFileTypes: true });
+  } catch (err) {
+    errors.push(`${dirPath}: failed to read directory (${err.message})`);
+    return { manifests, errors };
+  }
+
+  const manifestFiles = entries
+    .filter((e) => e.isFile() && e.name.endsWith('.manifest.json'))
+    .map((e) => join(dirPath, e.name))
+    .sort();
+
+  for (const filePath of manifestFiles) {
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync(filePath, 'utf8'));
+    } catch (err) {
+      errors.push(`${filePath}: failed to parse JSON (${err.message})`);
+      continue;
+    }
+
+    const result = validateManifest(parsed, { filePath, strict });
+    if (!result.valid) {
+      errors.push(...result.errors);
+      continue;
+    }
+
+    manifests.push({ ...parsed, _filePath: filePath });
+  }
+
+  return { manifests, errors };
+}
+
+/**
+ * mergeManifests(builtin, user, project)
+ *
+ * Merges three manifest arrays by `id`. Precedence (highest wins): project >
+ * user > builtin. When multiple tiers declare the same id, only the
+ * highest-precedence entry is kept.
+ *
+ * @param {object[]} builtin
+ * @param {object[]} user
+ * @param {object[]} project
+ * @returns {object[]}
+ */
+export function mergeManifests(builtin = [], user = [], project = []) {
+  const map = new Map();
+
+  // Load lowest priority first so higher priority layers overwrite.
+  for (const m of builtin) map.set(m.id, m);
+  for (const m of user) map.set(m.id, m);
+  for (const m of project) map.set(m.id, m);
+
+  return [...map.values()];
+}
+
+/**
+ * resolveManifestDirs({ rootDir, homeDir })
+ *
+ * Returns the canonical directory paths for each manifest tier.
+ *
+ * @param {{ rootDir?: string, homeDir?: string }} opts
+ * @returns {{ builtin: string, user: string, project: string }}
+ */
+export function resolveManifestDirs({ rootDir = process.cwd(), homeDir } = {}) {
+  const home = homeDir ?? (process.env.HOME || process.env.USERPROFILE || '');
+
+  return {
+    builtin: join(PACKAGE_ROOT, 'lib', 'extensions', 'manifests'),
+    user: join(home, '.config', 'construct', 'providers'),
+    project: join(rootDir, '.cx', 'providers'),
+  };
+}

package/lib/extensions/manifest-schema.mjs

@@ -0,0 +1,141 @@
+/**
+ * lib/extensions/manifest-schema.mjs — canonical extension manifest schema descriptor.
+ *
+ * Defines the vocabulary for extension manifests as per ADR-0052 (A2 architecture).
+ * A plain JS descriptor, not JSON Schema — the validator in validate.mjs
+ * consumes it directly. The schema is intentionally additive: new optional fields
+ * may be added in a minor version bump; new required fields or kind removals are
+ * breaking and require a COMPAT_VERSION increment.
+ */
+
+/**
+ * All valid extension kind values. A manifest must declare exactly one.
+ *
+ * Taxonomy:
+ *   model              — LLM or embedding model provider
+ *   data-source        — read-only external data integration (GitHub, Jira, etc.)
+ *   external-write     — write-capable integration (creates issues, PRs, etc.)
+ *   embed-index        — vector index / retrieval surface
+ *   mcp-tool           — MCP-protocol tool or server
+ *   storage            — durable state backend (DB, blob store)
+ *   queue              — async message bus or task queue
+ *   telemetry          — observability sink (metrics, traces, logs)
+ *   artifact-renderer  — renders Construct artifact types to output formats
+ *   specialist-pack    — bundle of specialist persona definitions
+ *   team-pack          — pre-wired team configuration
+ *   profile-pack       — scope/profile bundle
+ *   host-adapter       — IDE or host-surface integration
+ *   ingestion-provider — local document/audio ingestion sidecar (docling, whisper)
+ *                        provisioned outside npm; declares an install probe, a
+ *                        health check, and a degradation chain (LMCP-K2).
+ */
+export const MANIFEST_KINDS = [
+  'model',
+  'data-source',
+  'external-write',
+  'embed-index',
+  'mcp-tool',
+  'storage',
+  'queue',
+  'telemetry',
+  'artifact-renderer',
+  'specialist-pack',
+  'team-pack',
+  'profile-pack',
+  'host-adapter',
+  'ingestion-provider',
+];
+
+/**
+ * Fields every manifest must carry. Absence of any required field is a hard
+ * validation error and the manifest is rejected.
+ */
+export const REQUIRED_FIELDS = ['id', 'version', 'kind'];
+
+/**
+ * Fields a manifest may carry. These are not validated for shape — the
+ * validator checks only presence of required fields and semantic constraints.
+ * Extensions that add fields outside this list are accepted but their extra
+ * fields are ignored by core consumers.
+ */
+export const OPTIONAL_FIELDS = [
+  'capabilities',
+  'configSchema',
+  'secretEnvKeys',
+  'modes',
+  'surfaces',
+  'operations',
+  'healthCheck',
+  'dryRun',
+  'idempotency',
+  'rateLimit',
+  'retry',
+  'degradation',
+  'securityClassification',
+  'approvalRequirements',
+  'tests',
+  'docs',
+  'owner',
+  'compatVersion',
+  'installSource',
+  'installDependencies',
+  'installProbe',
+  'removalStatus',
+  'prompts',
+  'toolGrantsRequested',
+  'sourceTarget',
+];
+
+/**
+ * Current schema version. A manifest with compatVersion > COMPAT_VERSION was
+ * written for a newer schema than this runtime understands — load is refused
+ * to prevent silent misinterpretation. Forward compatibility is not guaranteed.
+ */
+export const COMPAT_VERSION = 1;
+
+/**
+ * Environment variable prefixes that extension manifests are allowed to
+ * request via `secretEnvKeys`. Any env key that does not start with one of
+ * these prefixes is rejected in strict mode to prevent credential exfiltration
+ * via extension manifests.
+ */
+export const ALLOWED_SECRET_ENV_PREFIXES = [
+  'GITHUB_', 'GH_', 'JIRA_', 'CONFLUENCE_', 'SLACK_', 'SALESFORCE_',
+  'ANTHROPIC_', 'OPENAI_', 'GOOGLE_', 'DEEPSEEK_', 'CONSTRUCT_',
+  'AWS_', 'AZURE_', 'DATADOG_', 'SENTRY_', 'LINEAR_', 'NOTION_',
+  'OPENROUTER_', 'OPEN_ROUTER_',
+];
+
+/**
+ * Manifest kinds that are considered capability-escalation-sensitive.
+ * Manifests of these kinds are subject to additional checks in strict mode
+ * (e.g., tool grant allowlisting, builtin prompt shadowing).
+ */
+export const ESCALATION_SENSITIVE_KINDS = [
+  'specialist-pack', 'team-pack', 'data-source', 'mcp-tool', 'external-write',
+];
+
+/**
+ * Known tool grant identifiers that manifests may request. These correspond
+ * to the A6 policy model capability grants. Any grant requested outside this
+ * set is rejected in strict mode.
+ */
+export const KNOWN_REQUESTABLE_TOOL_GRANTS = [
+  'shell', 'exec', 'network', 'filesystem', 'webhook', 'admin', 'config',
+];
+
+/**
+ * Built-in specialist persona ids shipped with Construct. Manifests that
+ * declare prompts targeting these ids without `override: true` are rejected
+ * in strict mode to prevent accidental or malicious prompt shadowing.
+ *
+ * Reflects the 12-role roster (11 workers + orchestrator) from
+ * construct-rf26.11's specialist consolidation. The pre-consolidation list
+ * was already stale (missing several real ids, and listed a non-existent
+ * 'cx-operator') — this is a full replacement, not an incremental edit.
+ */
+export const BUILTIN_SPECIALIST_IDS = [
+  'cx-orchestrator', 'cx-architect', 'cx-reviewer', 'cx-engineer',
+  'cx-debugger', 'cx-qa', 'cx-security', 'cx-operations',
+  'cx-product-manager', 'cx-data-analyst', 'cx-designer', 'cx-researcher',
+];

package/lib/extensions/manifests/anthropic.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "anthropic",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["ANTHROPIC_API_KEY"],
+  "docs": "Anthropic (direct)",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/atlassian-confluence.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "atlassian-confluence",
+  "version": "1.0.0",
+  "kind": "data-source",
+  "capabilities": ["read", "search"],
+  "secretEnvKeys": ["CONFLUENCE_BASE_URL", "CONFLUENCE_EMAIL", "CONFLUENCE_API_TOKEN"],
+  "operations": ["read", "search"],
+  "securityClassification": "trusted",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin"
+}

package/lib/extensions/manifests/atlassian-jira.manifest.json

@@ -0,0 +1,53 @@
+{
+  "id": "atlassian-jira",
+  "version": "1.0.0",
+  "kind": "data-source",
+  "capabilities": ["read", "search"],
+  "secretEnvKeys": ["JIRA_BASE_URL", "JIRA_EMAIL", "JIRA_API_TOKEN"],
+  "operations": ["read", "search"],
+  "securityClassification": "trusted",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "sourceTarget": {
+    "provider": "jira",
+    "selector": {
+      "field": "project",
+      "pattern": "^[A-Z][A-Z0-9]{1,9}$",
+      "patternTransform": "trimUpper",
+      "hint": "required Jira project key (2–10 uppercase letters/digits)",
+      "normalize": "trimUpper"
+    },
+    "signature": { "template": "jira:project:{value}", "valueMode": "upperOrEmpty" },
+    "legacyEnv": { "vars": ["JIRA_PROJECTS"], "parse": "csv", "valueTransform": "upper" },
+    "aliases": { "strategy": "simple", "displayPrefix": "Jira", "catchAll": true },
+    "embed": {
+      "mode": "perTarget",
+      "valueField": "project",
+      "valueKind": "scalar",
+      "refs": ["issues"],
+      "limit": 50
+    },
+    "embedFilters": {
+      "valueField": "project",
+      "valueKind": "scalar",
+      "defaultRefs": ["issues"],
+      "extraFilterKeys": ["jql"],
+      "defaultLimit": 50
+    },
+    "demandFetch": {
+      "targetRefs": ["issues"],
+      "targetJqlTemplate": "project = \"{value}\" AND statusCategory != Done ORDER BY updated DESC",
+      "targetJqlFilterKey": "jql",
+      "targetDefaultLimit": 50,
+      "queryDynamicJql": {
+        "singleTemplate": "project = \"{value}\" AND statusCategory != Done ORDER BY updated DESC",
+        "broadTemplate": "project IN ({values}) AND updated >= -{recencyDays}d ORDER BY updated DESC",
+        "recencyEnvVar": "JIRA_FETCH_RECENCY_DAYS",
+        "recencyDefaultDays": 30,
+        "legacyProjectsEnvVar": "JIRA_PROJECTS"
+      },
+      "queryDefaultLimit": 50
+    }
+  }
+}

package/lib/extensions/manifests/directory.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "directory",
+  "version": "1.0.0",
+  "kind": "data-source",
+  "capabilities": ["read", "search"],
+  "secretEnvKeys": [],
+  "operations": ["read", "search"],
+  "securityClassification": "trusted",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin"
+}

package/lib/extensions/manifests/docling.manifest.json

@@ -0,0 +1,37 @@
+{
+  "id": "docling",
+  "version": "1.0.0",
+  "kind": "ingestion-provider",
+  "capabilities": ["document-extraction"],
+  "docs": "Layout-aware document ingestion (PDF, DOCX/XLSX/PPTX/ODT/ODS, rich-text, Spotlight-indexable formats) via a Python sidecar provisioned through uv. Governed provider: install/health are probed, not assumed, and failure follows a declared degradation chain rather than crashing ingest.",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "uv-venv",
+  "installDependencies": ["uv"],
+  "installProbe": {
+    "kind": "venv-marker",
+    "runtimeDirEnv": "CONSTRUCT_DOCLING_RUNTIME_DIR",
+    "defaultRuntimeDir": ".cx/runtime/docling",
+    "markerFile": ".install-marker.json",
+    "versionField": "doclingVersion",
+    "description": "Presence of <runtimeDir>/.venv/bin/python plus a .install-marker.json recording the installed docling version. Absence of either is treated as not-installed."
+  },
+  "healthCheck": {
+    "kind": "subprocess-version",
+    "command": "<runtimeDir>/.venv/bin/docling",
+    "args": ["--version"],
+    "timeoutMs": 15000,
+    "description": "Runs the venv-installed `docling` console script directly (not `uv run`, which expects a pyproject-based project rather than a bare venv). A non-zero exit, timeout, or missing venv is unhealthy; stdout carries the docling/docling-core/docling-parse version lines."
+  },
+  "degradation": {
+    "chain": [
+      { "id": "docling", "mode": "sidecar", "description": "Layout-aware extraction (tables, OCR, all formats) via the local Python sidecar." },
+      { "id": "node-native", "mode": "adapter", "description": "unpdf (PDF) or mammoth (DOCX) — pure-JS, lower fidelity, no OCR, no XLSX/PPTX/ODT/ODS support." },
+      { "id": "refuse", "mode": "error", "description": "No extractor available for this format; ingest fails loud with an actionable install hint." }
+    ],
+    "terminal": "refuse",
+    "resultMarking": "degraded"
+  },
+  "removalStatus": "active",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/echo.manifest.json

@@ -0,0 +1,8 @@
+{
+  "id": "echo",
+  "version": "1.0.0",
+  "kind": "mcp-tool",
+  "compatVersion": 1,
+  "docs": "Built-in echo tool for testing the extension manifest system.",
+  "owner": "construct-core"
+}

package/lib/extensions/manifests/feedback.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "feedback",
+  "version": "1.0.0",
+  "kind": "data-source",
+  "capabilities": ["read", "search"],
+  "secretEnvKeys": [],
+  "operations": ["read", "search"],
+  "securityClassification": "external-unauthenticated",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin"
+}

package/lib/extensions/manifests/github-copilot.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "github-copilot",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["GITHUB_TOKEN", "GH_TOKEN"],
+  "docs": "GitHub Copilot",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/github.manifest.json

@@ -0,0 +1,52 @@
+{
+  "id": "github",
+  "version": "1.0.0",
+  "kind": "data-source",
+  "capabilities": ["read", "search", "webhook"],
+  "secretEnvKeys": ["GITHUB_TOKEN", "GH_TOKEN"],
+  "operations": ["read", "search", "webhook"],
+  "securityClassification": "trusted",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "sourceTarget": {
+    "provider": "github",
+    "selector": {
+      "field": "repo",
+      "pattern": "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+      "patternTransform": "trim",
+      "hint": "required owner/repo slug",
+      "normalize": "trim"
+    },
+    "signature": { "template": "github:repo:{value}", "valueMode": "optionalLower" },
+    "legacyEnv": { "vars": ["GITHUB_REPOS", "GITHUB_REPO"], "parse": "csv" },
+    "aliases": { "strategy": "repoWords", "displayPrefix": null, "catchAll": false },
+    "embed": {
+      "mode": "aggregate",
+      "valueField": "repos",
+      "valueKind": "array",
+      "groups": [
+        { "refs": ["prs", "issues", "commits"], "limit": 25 },
+        { "refs": ["meta", "readme", "docs"], "limit": 25 }
+      ]
+    },
+    "embedFilters": {
+      "valueField": "repos",
+      "valueKind": "array",
+      "defaultRefs": ["prs", "issues", "commits"],
+      "refsFilterKey": "refs",
+      "defaultLimit": 25
+    },
+    "demandFetch": {
+      "targetRefs": ["meta", "readme", "docs", "prs", "issues", "commits"],
+      "targetRefsFilterKey": "refs",
+      "targetOptsField": "repos",
+      "targetOptsKind": "array",
+      "targetDefaultLimit": 25,
+      "queryRefs": ["meta", "readme", "docs", "prs", "issues", "commits"],
+      "queryOptsField": "repos",
+      "queryOptsKind": "array",
+      "queryDefaultLimit": 25
+    }
+  }
+}

package/lib/extensions/manifests/linear.manifest.json

@@ -0,0 +1,50 @@
+{
+  "id": "linear",
+  "version": "1.0.0",
+  "kind": "data-source",
+  "capabilities": ["read"],
+  "secretEnvKeys": ["LINEAR_API_KEY"],
+  "operations": ["read"],
+  "securityClassification": "trusted",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "sourceTarget": {
+    "provider": "linear",
+    "selector": {
+      "field": "team",
+      "pattern": null,
+      "patternTransform": "trim",
+      "hint": "required Linear team key or name",
+      "normalize": "trim"
+    },
+    "signature": { "template": "linear:team:{value}", "valueMode": "lowerOrEmpty" },
+    "legacyEnv": { "vars": ["LINEAR_TEAMS"], "parse": "csv" },
+    "aliases": { "strategy": "simple", "displayPrefix": "Linear", "catchAll": true },
+    "embed": {
+      "mode": "perTarget",
+      "valueField": "team",
+      "valueKind": "scalar",
+      "refs": ["issues"],
+      "limit": 50
+    },
+    "embedFilters": {
+      "valueField": "team",
+      "valueKind": "scalar",
+      "defaultRefs": ["issues"],
+      "extraFilterKeys": ["states"],
+      "defaultLimit": 50
+    },
+    "demandFetch": {
+      "targetRefs": ["issues"],
+      "targetOptsField": "team",
+      "targetOptsKind": "scalar",
+      "targetDefaultLimit": 50,
+      "queryRefs": ["issues"],
+      "queryOptsField": "team",
+      "queryOptsKind": "scalar",
+      "queryOptsNullable": true,
+      "queryDefaultLimit": 50
+    }
+  }
+}

package/lib/extensions/manifests/local.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "local",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": [],
+  "docs": "Local OpenAI-compatible server",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/ollama.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "ollama",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": [],
+  "docs": "Ollama (local)",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/openai.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "openai",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["OPENAI_API_KEY"],
+  "docs": "OpenAI",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/openrouter-anthropic.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "openrouter-anthropic",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["OPENROUTER_API_KEY"],
+  "docs": "Anthropic via OpenRouter",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/openrouter-deepseek.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "openrouter-deepseek",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["OPENROUTER_API_KEY"],
+  "docs": "DeepSeek via OpenRouter",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/openrouter-google.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "openrouter-google",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["OPENROUTER_API_KEY"],
+  "docs": "Google via OpenRouter",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}

package/lib/extensions/manifests/openrouter-llama.manifest.json

@@ -0,0 +1,12 @@
+{
+  "id": "openrouter-llama",
+  "version": "1.0.0",
+  "kind": "model",
+  "capabilities": ["chat"],
+  "secretEnvKeys": ["OPENROUTER_API_KEY"],
+  "docs": "Meta Llama via OpenRouter",
+  "owner": "construct-core",
+  "compatVersion": 1,
+  "installSource": "builtin",
+  "securityClassification": "trusted"
+}