@modootoday/pmcp 0.13.1 → 0.14.1

package/docs/manual-library-skills.md

@@ -0,0 +1,74 @@
+# Manually selected library skills
+
+[Back to the overview](../README.md)
+
+These three library-major pilots provide free public instructions for Python,
+Rust and Go libraries. Select them yourself and copy them into a local collection
+you choose. No PMCP login, subscription or registry account is required to read
+the files or load that collection.
+
+| Ecosystem  | Library                    | Selected version                | Instructions                                           |
+| ---------- | -------------------------- | ------------------------------- | ------------------------------------------------------ |
+| PyPI       | `pydantic` 2               | `2.13.4`                        | [Pydantic SKILL.md](/skills/pydantic/2/SKILL.md)       |
+| crates.io  | `serde_json` 1             | `1.0.149`, with Serde `1.0.228` | [serde_json SKILL.md](/skills/serde-json/1/SKILL.md)   |
+| Go modules | `github.com/google/uuid` 1 | `v1.6.0`                        | [Google UUID SKILL.md](/skills/google-uuid/1/SKILL.md) |
+
+Selected versions identify each pilot's scope. They are not a statement that
+every project, feature or AI runtime has been verified. Each SKILL.md contains
+its own supported task boundaries and links to primary documentation and
+licenses. Keep those sources when copying or adapting the instructions.
+
+## Choose a collection and copy only the skills you need
+
+Place each downloaded file under its frontmatter name:
+
+```text
+chosen-collection/
+  skills/
+    pydantic/
+      SKILL.md
+    serde-json/
+      SKILL.md
+    google-uuid/
+      SKILL.md
+```
+
+Include only your selected files; all three are not required locally. The
+collection may be a plain directory without a package.json. Keep SKILL.md
+frontmatter, source links and any accompanying reference files intact. The
+collection's directory name is a local discovery label, not a registry package
+identity.
+
+## Register the collection explicitly
+
+For a direct CLI invocation:
+
+```bash
+pmcp serve --package /absolute/path/to/chosen-collection
+```
+
+Or merge the chosen path into the existing project's pmcp.toml:
+
+```toml
+[catalog]
+packages = ["./chosen-collection"]
+```
+
+Preserve other catalog entries rather than replacing them with this example.
+Project-relative paths resolve from the configuration's directory. The
+existing `skill_catalog`, `skill_find` and `skill_call` tools can then discover
+and read the selected local instructions. Leave folder trust and tool approval
+to the native AI runtime.
+
+## Understand the manual boundary
+
+PMCP does not automatically detect these pilots from PyPI, Cargo or Go
+dependencies. They are separate from the managed npm skill catalog and are
+not installed through `pmcp available` or `pmcp install`. Serving a local
+collection does not install a library, download a compiler or run its examples.
+
+Loading an instruction file also does not establish model execution evidence.
+Check the project's installed library major, lockfile and environment before
+applying guidance, and run the appropriate project checks after code changes.
+This explicit workflow supplements the package skill discovery described in
+the [skills reference](skills.md).

package/docs/skills.md

@@ -59,6 +59,52 @@ are left out of `skill_catalog` and `skill_find` unless `kind` asks for them
 (`agent`, `hook`, `mcp`, or `any`); `skill_describe`, `skill_read` and
 `skill_call` work on every kind.
 
+## Public native marketplace
+
+The public repository's canonical sources are standard Agent Skills folders:
+`plugins/<product-major>/skills/<skill-name>/SKILL.md`. Each supported library
+major is a separate selectable plugin. The PMCP bridge has its own `pmcp` plugin.
+The website's `docs/skills/` files are generated downloads from those sources;
+existing URLs and immutable archive bytes remain available.
+
+| Tool            | Native distribution                                                  |
+| --------------- | -------------------------------------------------------------------- |
+| Claude Code     | `.claude-plugin/marketplace.json` and plugin manifests               |
+| Codex           | `.agents/plugins/marketplace.json` and portable `plugin.json`        |
+| Grok Build      | Claude-compatible marketplace and plugin manifests                   |
+| Gemini CLI      | `gemini-extension.json`; selected CLI exports are extensions         |
+| Antigravity CLI | Selected CLI export with its own `plugin.json` and `mcp_config.json` |
+
+For native marketplace commands, follow the [README](../README.md).
+Gemini and Antigravity need their own package formats for selected library plugins;
+do not assume that identically named manifest files accept the same schema.
+After the next npm release, `pmcp marketplace export <plugin> --runtime <tool>
+--output <new-directory>` materializes a selected package without altering native
+settings or installing it. Use the native manager to review and install that folder.
+Existing export destinations are preserved.
+
+The built-in catalog on repository main is available without remote fetching.
+`--no-builtin` or `[catalog] builtin = false` opts out; library APIs continue to
+read explicitly supplied catalog roots. `--marketplace <directory>` reads installed
+Claude, Codex and Grok local descriptors, rejects path escapes and does not fetch
+remote plugin sources. Add a remote marketplace with its native manager first.
+
+Public npm skill installation uses the bundled catalog, a matching installed
+dependency version and immutable free archive URLs. It verifies archive integrity,
+content-only metadata, instruction digests and installed file bytes. npm or Bun
+changes the project and lockfile only after confirmation, with scripts disabled.
+`--provider hosted` remains a separate service path with its own access policy.
+Native plugin installation does not automatically version-match dependencies:
+select the appropriate major yourself. Non-npm library instructions remain manual.
+
+## Manually selected Python, Rust and Go library skills
+
+Public Pydantic, serde_json and Google UUID instructions are free to read and
+copy into a local collection. Register that collection explicitly; these pilots
+are not automatically matched from PyPI, Cargo or Go dependencies. Follow the
+[manual library skills guide](manual-library-skills.md) for download paths and
+the existing CLI configuration workflow.
+
 ## MCP Skills extension
 
 The server also declares `io.modelcontextprotocol/skills` (SEP-2640): it

package/gemini-extension.json

@@ -0,0 +1,11 @@
+{
+  "name": "pmcp",
+  "version": "0.14.1",
+  "mcpServers": {
+    "pmcp": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@modootoday/pmcp@0.13.1", "serve"]
+    }
+  }
+}

package/mcp.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "pmcp": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@modootoday/pmcp@0.13.1", "serve"]
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/pmcp",
-  "version": "0.13.1",
+  "version": "0.14.1",
   "license": "Elastic-2.0",
   "author": "modootoday",
   "description": "Use the skills your packages already ship, and keep your AI tools' project configuration in one place.",
@@ -8,6 +8,7 @@
     "mcp",
     "model-context-protocol",
     "skills",
+    "plugins",
     "agent",
     "node-modules",
     "catalog"
@@ -58,6 +59,15 @@
     "!dist/**/*.map",
     "!dist/.tsbuildinfo",
     "skills",
+    "plugins",
+    ".claude-plugin/marketplace.json",
+    ".claude-plugin/plugin.json",
+    ".agents/plugins/marketplace.json",
+    "plugin.json",
+    "mcp.json",
+    ".mcp.json",
+    "gemini-extension.json",
+    "docs/catalog.json",
     "docs/*.md",
     "README.md",
     "SECURITY.md",
@@ -69,10 +79,17 @@
     "typecheck": "tsgo --noEmit --incremental --tsBuildInfoFile ./dist/.tsbuildinfo --singleThreaded && tsgo -p tsconfig.tests.json --noEmit --singleThreaded",
     "test": "vitest run",
     "clean": "rimraf dist",
-    "catalog:refresh": "node scripts/refresh-catalog.mjs",
-    "observations:refresh": "node scripts/refresh-observations.mjs",
-    "site:build": "node scripts/build-site-assets.mjs && node scripts/build-catalog-pages.mjs && node scripts/build-observation-pages.mjs && node scripts/build-guide-pages.mjs && node scripts/build-sitemap.mjs",
-    "docs:check": "prettier --check --ignore-path /dev/null README.md docs/*.md && node scripts/build-guide-pages.mjs --check && node scripts/build-site-assets.mjs --check",
+    "site:build": "bun run marketplace:build && node scripts/build-site-styles.mjs && node scripts/build-site-assets.mjs && node scripts/build-public-pages.mjs && node scripts/build-guide-pages.mjs && node scripts/build-catalog-pages.mjs && node scripts/build-observation-pages.mjs && node scripts/build-sitemap.mjs",
+    "site:check": "node scripts/build-site-styles.mjs --check && node scripts/build-site-assets.mjs --check && node scripts/build-public-pages.mjs --check && node scripts/build-guide-pages.mjs --check && node scripts/build-catalog-pages.mjs --check && node scripts/build-observation-pages.mjs --check && node scripts/build-sitemap.mjs --check",
+    "site:catalog": "node scripts/refresh-catalog.mjs",
+    "site:observations": "node scripts/refresh-observations.mjs",
+    "site:topics": "node scripts/refresh-topics.mjs",
+    "site:pages": "node scripts/prepare-pages.mjs",
+    "skills:check": "bun scripts/check-library-skills.mjs",
+    "skills:pack": "bun scripts/pack-library-skills.mjs",
+    "marketplace:build": "bun scripts/build-marketplace.mjs",
+    "marketplace:check": "bun scripts/build-marketplace.mjs --check",
+    "docs:check": "prettier --check --ignore-path /dev/null README.md docs/*.md && npm run marketplace:check && npm run skills:check && npm run site:check",
     "site:deployed": "node scripts/check-deployed.mjs",
     "prepack": "npm run docs:check && npm run build && npm run typecheck && npm test",
     "format": "prettier --write .",

package/plugin.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "pmcp",
+  "version": "0.14.1",
+  "description": "Find package skills and use native runtime project configuration.",
+  "author": { "name": "modootoday" },
+  "license": "Elastic-2.0",
+  "repository": "https://github.com/modootoday/pmcp",
+  "homepage": "https://pmcp.build/skills/"
+}

package/plugins/agent-base-9/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "agent-base-9",
+  "version": "9.0.0",
+  "description": "Use agent-base 9 as an ESM adapter for Node's HTTP and HTTPS agent machinery.",
+  "author": { "name": "modootoday" },
+  "license": "Elastic-2.0",
+  "repository": "https://github.com/modootoday/pmcp",
+  "homepage": "https://pmcp.build/skills/"
+}

package/plugins/agent-base-9/LICENSE

@@ -0,0 +1,93 @@
+Elastic License 2.0
+
+URL: https://www.elastic.co/licensing/elastic-license
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor’s trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that
+organization. **control** means ownership of substantially all the assets of an
+entity, or the power to direct its management and policies by vote, contract, or
+otherwise. Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

package/plugins/agent-base-9/NOTICE

@@ -0,0 +1,51 @@
+pmcp
+
+Copyright (c) 2026 modootoday. All rights reserved.
+
+Licensor: modootoday
+Licensed under the Elastic License 2.0; see LICENSE.
+
+The licensor is modootoday, the company, not any individual contributor. This
+file names the licensor because the Elastic License 2.0 defines that term rather
+than carrying a copyright line of its own; LICENSE is kept unmodified.
+
+What the licence permits, in short, without replacing the terms in LICENSE:
+
+  - Using this software inside your own company, on any scale.
+  - Embedding it in a product you sell, and modifying or forking it.
+  - Redistributing it, with these notices intact.
+  - Running it locally as an MCP server, which is what it is for. A host
+    process spawning it on your own machine is use, not a hosted service.
+
+What it does not permit:
+
+  - Offering this software to third parties as a hosted or managed service.
+    A remotely hosted MCP endpoint serving other people is the case this
+    forbids.
+  - Circumventing licence key functionality.
+  - Removing or obscuring these notices.
+
+The Elastic License 2.0 is source-available, not an OSI-approved open source
+licence. It grants a patent licence and ends that licence if you assert a patent
+claim against the software; see the Patents section of LICENSE.
+
+LICENSE governs. Where this summary and LICENSE differ, LICENSE is what applies.
+
+---
+
+This software depends on the following packages, which are distributed under
+their own terms and are not covered by the licence above.
+
+  @modelcontextprotocol/server   MIT   Copyright (c) Anthropic, PBC
+  @modelcontextprotocol/core     MIT   Copyright (c) Anthropic, PBC
+  zod                            MIT   Copyright (c) Colin McDonnell
+  semver                         ISC   See the dependency's LICENSE file.
+  smol-toml              BSD-3-Clause   Copyright (c) Squirrel Chat et al.
+  yaml                           ISC   Copyright Eemeli Aro
+
+Full licence texts and copyright notices ship with those packages. Their
+respective licence terms govern distribution of those dependencies.
+
+@huggingface/transformers is an optional peer dependency. It is never
+distributed with this package; a user who wants semantic ranking installs it
+themselves, under its own Apache-2.0 terms.

package/plugins/agent-base-9/gemini-extension.json

@@ -0,0 +1 @@
+{ "name": "agent-base-9", "version": "9.0.0" }

package/plugins/agent-base-9/plugin.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "agent-base-9",
+  "version": "9.0.0",
+  "description": "Use agent-base 9 as an ESM adapter for Node's HTTP and HTTPS agent machinery.",
+  "author": { "name": "modootoday" },
+  "license": "Elastic-2.0",
+  "repository": "https://github.com/modootoday/pmcp",
+  "homepage": "https://pmcp.build/skills/"
+}

package/plugins/agent-base-9/skills/agent-base/SKILL.md

@@ -0,0 +1,118 @@
+---
+name: agent-base
+description: Use agent-base 9 as an ESM adapter for Node's HTTP and HTTPS agent machinery.
+---
+
+Verified against agent-base@9.0.0 on 2026-09-08. 3 of 3 examples executed.
+
+# agent-base
+
+## Version and module shape
+
+This skill targets `agent-base` 9.x. It is ESM-only and requires Node.js 20 or newer. Import the named `Agent` class and helpers:
+
+```ts
+import { Agent, json, req, toBuffer } from 'agent-base';
+```
+
+Do not use the old CommonJS/default-export form:
+
+```js
+const agent = require('agent-base');
+```
+
+That was the v6 shape. The v7 API removed the default export and introduced the named abstract `Agent` class.
+
+## `Agent` subclass contract
+
+`Agent` extends Node's `http.Agent`. A subclass must implement:
+
+```ts
+connect(
+  req: http.ClientRequest,
+  options: AgentConnectOpts
+): Promise<Duplex | http.Agent> | Duplex | http.Agent;
+```
+
+`connect()` may return:
+
+- a `Duplex` socket;
+- another `http.Agent`, delegating connection handling; or
+- a promise resolving to either of those.
+
+The options include `secureEndpoint: boolean`, which distinguishes HTTPS from HTTP connection requests. The resulting agent is passed to Node's `http` or `https` APIs through their `{ agent }` option.
+
+```ts pmcp-example
+import assert from 'node:assert/strict';
+import { PassThrough } from 'node:stream';
+import { Agent } from 'agent-base';
+
+class LocalAgent extends Agent {
+  connect(_request: never, options: { secureEndpoint: boolean }) {
+    assert.equal(options.secureEndpoint, false);
+    return new PassThrough();
+  }
+}
+
+const agent = new LocalAgent({ keepAlive: true });
+assert.ok(agent instanceof Agent);
+assert.equal(agent.options.keepAlive, true);
+
+const socket = agent.connect({} as never, { secureEndpoint: false });
+assert.ok(socket instanceof PassThrough);
+```
+
+The package is an adapter, not a request runner. In a real request, pass the subclass instance to Node's `http.get()` or `https.get()` as `{ agent }`. The connection implementation normally returns a socket created by the appropriate networking API, or returns another agent when delegation is needed.
+
+Version 9's `createSocket` agent detection uses duck typing. This matters when delegating to agent implementations that are not instances of Node's `http.Agent`, such as `tunnel-agent`'s `TunnelingAgent`; do not rely on the older strict-instance behavior.
+
+## `toBuffer()`
+
+`toBuffer(readable)` consumes a readable stream and resolves to a `Buffer` containing its bytes. Provide Buffer or other byte chunks to the readable stream.
+
+```ts pmcp-example
+import assert from 'node:assert/strict';
+import { Readable } from 'node:stream';
+import { toBuffer } from 'agent-base';
+
+const result = await toBuffer(
+  Readable.from([Buffer.from('hello '), Buffer.from('world')]),
+);
+assert.ok(Buffer.isBuffer(result));
+assert.equal(result.toString('utf8'), 'hello world');
+```
+
+## `json()`
+
+`json(readable)` consumes a readable stream, decodes it as UTF-8, and parses it with `JSON.parse`.
+
+```ts pmcp-example
+import assert from 'node:assert/strict';
+import { Readable } from 'node:stream';
+import { json } from 'agent-base';
+
+const value = await json(Readable.from([Buffer.from('{"ok":true,"count":2}') ]));
+assert.deepEqual(value, { ok: true, count: 2 });
+```
+
+The input must contain valid JSON. Parsing failures reject with the error from `JSON.parse`.
+
+## `req()`
+
+`req(url, opts)` creates and ends an HTTP or HTTPS request based on the URL and returns the `http.ClientRequest` with a promise-like `.then` method. It is intended as a small request helper; the returned thenable resolves to the response.
+
+This helper necessarily starts a real HTTP(S) request, so it is not demonstrated with a runnable example here: examples in this skill must run without network access. Use it only in an environment where the target URL is available, and provide request options as the second argument when needed.
+
+## Common mistakes
+
+- Importing a default export or using `require('agent-base')`; v9 uses the named ESM export `Agent`.
+- Trying to instantiate `Agent` directly; it is abstract and requires a `connect()` implementation.
+- Treating `connect()` as returning only a socket. It can return a socket, another agent, or a promise of either.
+- Ignoring `options.secureEndpoint` when choosing HTTP versus HTTPS/TLS connection behavior.
+- Passing string chunks to `toBuffer()` through a Node readable; use byte chunks such as `Buffer` or `Uint8Array`.
+- Treating agent-base as a standalone request runner. It integrates with Node's `http` and `https` request machinery.
+- Running package examples that use `describe`, `it`, or `expect` directly. Those are runner globals, not part of agent-base or a plain Node/Bun script.
+
+## Not covered
+
+This skill does not cover the internal details of Node's `http.Agent` pooling, custom proxy protocols, TLS option construction, `tunnel-agent` integration beyond the v9 duck-typing change, or network-backed usage of `req()`. It also does not cover package development commands or the package's test suite.

package/plugins/ajv-formats-3/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "ajv-formats-3",
+  "version": "3.0.0",
+  "description": "Use ajv-formats 3.x with Ajv 8 to add standard and OpenAPI format validation, fast/selective modes, direct format access, and format comparison keywords.",
+  "author": { "name": "modootoday" },
+  "license": "Elastic-2.0",
+  "repository": "https://github.com/modootoday/pmcp",
+  "homepage": "https://pmcp.build/skills/"
+}

package/plugins/ajv-formats-3/LICENSE

@@ -0,0 +1,93 @@
+Elastic License 2.0
+
+URL: https://www.elastic.co/licensing/elastic-license
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor’s trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that
+organization. **control** means ownership of substantially all the assets of an
+entity, or the power to direct its management and policies by vote, contract, or
+otherwise. Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

package/plugins/ajv-formats-3/NOTICE

@@ -0,0 +1,51 @@
+pmcp
+
+Copyright (c) 2026 modootoday. All rights reserved.
+
+Licensor: modootoday
+Licensed under the Elastic License 2.0; see LICENSE.
+
+The licensor is modootoday, the company, not any individual contributor. This
+file names the licensor because the Elastic License 2.0 defines that term rather
+than carrying a copyright line of its own; LICENSE is kept unmodified.
+
+What the licence permits, in short, without replacing the terms in LICENSE:
+
+  - Using this software inside your own company, on any scale.
+  - Embedding it in a product you sell, and modifying or forking it.
+  - Redistributing it, with these notices intact.
+  - Running it locally as an MCP server, which is what it is for. A host
+    process spawning it on your own machine is use, not a hosted service.
+
+What it does not permit:
+
+  - Offering this software to third parties as a hosted or managed service.
+    A remotely hosted MCP endpoint serving other people is the case this
+    forbids.
+  - Circumventing licence key functionality.
+  - Removing or obscuring these notices.
+
+The Elastic License 2.0 is source-available, not an OSI-approved open source
+licence. It grants a patent licence and ends that licence if you assert a patent
+claim against the software; see the Patents section of LICENSE.
+
+LICENSE governs. Where this summary and LICENSE differ, LICENSE is what applies.
+
+---
+
+This software depends on the following packages, which are distributed under
+their own terms and are not covered by the licence above.
+
+  @modelcontextprotocol/server   MIT   Copyright (c) Anthropic, PBC
+  @modelcontextprotocol/core     MIT   Copyright (c) Anthropic, PBC
+  zod                            MIT   Copyright (c) Colin McDonnell
+  semver                         ISC   See the dependency's LICENSE file.
+  smol-toml              BSD-3-Clause   Copyright (c) Squirrel Chat et al.
+  yaml                           ISC   Copyright Eemeli Aro
+
+Full licence texts and copyright notices ship with those packages. Their
+respective licence terms govern distribution of those dependencies.
+
+@huggingface/transformers is an optional peer dependency. It is never
+distributed with this package; a user who wants semantic ranking installs it
+themselves, under its own Apache-2.0 terms.

package/plugins/ajv-formats-3/gemini-extension.json

@@ -0,0 +1 @@
+{ "name": "ajv-formats-3", "version": "3.0.0" }