@scopewatch/manifest 0.0.1

package/dist/errors.d.ts

@@ -0,0 +1,11 @@
+import type { ValidationError } from './schema.js';
+/**
+ * Format validation errors as readable, actionable messages.
+ * Each error includes context, the problem, and a recovery suggestion.
+ */
+export declare function formatValidationErrors(errors: ValidationError[]): string;
+/**
+ * Render a validation error suitable for the CLI.
+ */
+export declare function renderValidationError(errors: ValidationError[]): string;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CAyBxE;AAiFD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CASvE"}

package/dist/errors.js

@@ -0,0 +1,96 @@
+/**
+ * Format validation errors as readable, actionable messages.
+ * Each error includes context, the problem, and a recovery suggestion.
+ */
+export function formatValidationErrors(errors) {
+    const lines = [];
+    for (const error of errors) {
+        const path = formatPath(error.path);
+        const context = path ? `at ${path}` : 'at root';
+        lines.push('');
+        lines.push(`❌ Manifest validation failed ${context}:`);
+        lines.push('');
+        lines.push(`  ${error.message}`);
+        // Provide context-specific recovery suggestions
+        const suggestion = getRecoverySuggestion(error);
+        if (suggestion) {
+            lines.push('');
+            lines.push(suggestion);
+        }
+    }
+    if (lines.length === 0) {
+        return 'Manifest is valid.';
+    }
+    return lines.join('\n');
+}
+/**
+ * Convert path array to dot-notation string.
+ * E.g., ['capabilities', 0, 'tool_id'] → 'capabilities[0].tool_id'
+ */
+function formatPath(path) {
+    if (path.length === 0)
+        return '';
+    return path.reduce((acc, segment, i) => {
+        if (typeof segment === 'number') {
+            return `${acc}[${segment}]`;
+        }
+        return i === 0 ? String(segment) : `${acc}.${segment}`;
+    }, '');
+}
+/**
+ * Provide contextual recovery suggestions based on error type.
+ */
+function getRecoverySuggestion(error) {
+    const path = error.path.map(p => String(p)).join('.');
+    const code = error.code;
+    // Schema version mismatch
+    if (path === 'schemaVersion' && code === 'invalid_literal') {
+        return (`  Fix: This tool only supports schemaVersion: 1.\n` +
+            `  If you have an older manifest, it must be migrated first.`);
+    }
+    // Version format
+    if (path === 'version' && code === 'invalid_string') {
+        return (`  Fix: version must be semantic versioning (e.g., "1.2.0")\n` +
+            `  Current format is invalid.`);
+    }
+    // Missing required fields
+    if (code === 'invalid_union' || error.message.includes('Required')) {
+        const lastSegment = error.path[error.path.length - 1];
+        const field = typeof lastSegment === 'string' ? lastSegment : null;
+        if (field === 'tool_id') {
+            return (`  Fix: Every capability must declare which tool provides it.\n` +
+                `  Add "tool_id": "my_tool_id" to this capability entry.`);
+        }
+        if (field === 'verb') {
+            return (`  Fix: Every capability must declare a verb: one of\n` +
+                `    read | fetch | send | write | delete | execute`);
+        }
+    }
+    // Array minimum length
+    if (code === 'too_small') {
+        if (path === 'tools') {
+            return `  Fix: At least one tool must be declared.`;
+        }
+        if (path.includes('secrets') || path.includes('used_by')) {
+            return `  Fix: This array must not be empty.`;
+        }
+    }
+    // Invalid URL
+    if (code === 'invalid_string' && error.message.includes('URL')) {
+        return (`  Fix: homepage must be a valid URL (e.g., "https://example.com")\n` +
+            `  Remove it if not applicable, or format it as a full URL.`);
+    }
+    return null;
+}
+/**
+ * Render a validation error suitable for the CLI.
+ */
+export function renderValidationError(errors) {
+    if (errors.length === 0) {
+        return '✓ Manifest is valid.';
+    }
+    const header = errors.length === 1 ? 'Validation error:' : `${errors.length} validation errors:`;
+    const formatted = formatValidationErrors(errors);
+    return `${header}\n${formatted}`;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAyB;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,gCAAgC,OAAO,GAAG,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAEjC,gDAAgD;QAChD,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAyB;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,OAAO,IAAI,CAAC,MAAM,CAAS,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;QAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IACzD,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,KAAsB;IACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAExB,0BAA0B;IAC1B,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC3D,OAAO,CACL,oDAAoD;YACpD,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpD,OAAO,CACL,8DAA8D;YAC9D,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,IAAI,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CACL,gEAAgE;gBAChE,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,CACL,uDAAuD;gBACvD,oDAAoD,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,4CAA4C,CAAC;QACtD,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,OAAO,sCAAsC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,CACL,qEAAqE;YACrE,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAyB;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,qBAAqB,CAAC;IACjG,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEjD,OAAO,GAAG,MAAM,KAAK,SAAS,EAAE,CAAC;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { VerbSchema, ProvenanceSchema, CapabilityEntrySchema, SecretDeclarationSchema, ToolDeclarationSchema, SourceSchema, MetadataSchema, ServerManifestSchema, parseManifest, validateManifest, isServerManifest, type Verb, type Provenance, type CapabilityEntry, type SecretDeclaration, type ToolDeclaration, type Source, type Metadata, type ServerManifest, type ValidationResult, type ValidationError, } from './schema.js';
+export { formatValidationErrors, renderValidationError } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { VerbSchema, ProvenanceSchema, CapabilityEntrySchema, SecretDeclarationSchema, ToolDeclarationSchema, SourceSchema, MetadataSchema, ServerManifestSchema, parseManifest, validateManifest, isServerManifest, } from './schema.js';
+export { formatValidationErrors, renderValidationError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,GAWjB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,246 @@
+import { z } from 'zod';
+export declare const VerbSchema: z.ZodEnum<["read", "fetch", "send", "write", "delete", "execute"]>;
+export type Verb = z.infer<typeof VerbSchema>;
+export declare const ProvenanceSchema: z.ZodEnum<["declared", "inferred"]>;
+export type Provenance = z.infer<typeof ProvenanceSchema>;
+export declare const CapabilityEntrySchema: z.ZodObject<{
+    tool_id: z.ZodString;
+    verb: z.ZodEnum<["read", "fetch", "send", "write", "delete", "execute"]>;
+    resource: z.ZodOptional<z.ZodString>;
+    provenance: z.ZodEnum<["declared", "inferred"]>;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    tool_id: string;
+    verb: "read" | "fetch" | "send" | "write" | "delete" | "execute";
+    provenance: "declared" | "inferred";
+    resource?: string | undefined;
+    description?: string | undefined;
+}, {
+    tool_id: string;
+    verb: "read" | "fetch" | "send" | "write" | "delete" | "execute";
+    provenance: "declared" | "inferred";
+    resource?: string | undefined;
+    description?: string | undefined;
+}>;
+export type CapabilityEntry = z.infer<typeof CapabilityEntrySchema>;
+export declare const SecretDeclarationSchema: z.ZodObject<{
+    id: z.ZodString;
+    description: z.ZodString;
+    required: z.ZodBoolean;
+    used_by: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    id: string;
+    required: boolean;
+    used_by: string[];
+}, {
+    description: string;
+    id: string;
+    required: boolean;
+    used_by: string[];
+}>;
+export type SecretDeclaration = z.infer<typeof SecretDeclarationSchema>;
+export declare const ToolDeclarationSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    id: string;
+    name: string;
+}, {
+    description: string;
+    id: string;
+    name: string;
+}>;
+export type ToolDeclaration = z.infer<typeof ToolDeclarationSchema>;
+export declare const SourceSchema: z.ZodObject<{
+    type: z.ZodEnum<["npm", "git", "local"]>;
+    location: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "npm" | "git" | "local";
+    location: string;
+}, {
+    type: "npm" | "git" | "local";
+    location: string;
+}>;
+export type Source = z.infer<typeof SourceSchema>;
+export declare const MetadataSchema: z.ZodOptional<z.ZodObject<{
+    author: z.ZodOptional<z.ZodString>;
+    license: z.ZodOptional<z.ZodString>;
+    homepage: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    author?: string | undefined;
+    license?: string | undefined;
+    homepage?: string | undefined;
+}, {
+    author?: string | undefined;
+    license?: string | undefined;
+    homepage?: string | undefined;
+}>>;
+export type Metadata = z.infer<typeof MetadataSchema>;
+export declare const ServerManifestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    version: z.ZodString;
+    source: z.ZodObject<{
+        type: z.ZodEnum<["npm", "git", "local"]>;
+        location: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "npm" | "git" | "local";
+        location: string;
+    }, {
+        type: "npm" | "git" | "local";
+        location: string;
+    }>;
+    checksum: z.ZodString;
+    tools: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        description: string;
+        id: string;
+        name: string;
+    }, {
+        description: string;
+        id: string;
+        name: string;
+    }>, "many">;
+    capabilities: z.ZodArray<z.ZodObject<{
+        tool_id: z.ZodString;
+        verb: z.ZodEnum<["read", "fetch", "send", "write", "delete", "execute"]>;
+        resource: z.ZodOptional<z.ZodString>;
+        provenance: z.ZodEnum<["declared", "inferred"]>;
+        description: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        tool_id: string;
+        verb: "read" | "fetch" | "send" | "write" | "delete" | "execute";
+        provenance: "declared" | "inferred";
+        resource?: string | undefined;
+        description?: string | undefined;
+    }, {
+        tool_id: string;
+        verb: "read" | "fetch" | "send" | "write" | "delete" | "execute";
+        provenance: "declared" | "inferred";
+        resource?: string | undefined;
+        description?: string | undefined;
+    }>, "many">;
+    secrets: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        description: z.ZodString;
+        required: z.ZodBoolean;
+        used_by: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        description: string;
+        id: string;
+        required: boolean;
+        used_by: string[];
+    }, {
+        description: string;
+        id: string;
+        required: boolean;
+        used_by: string[];
+    }>, "many">;
+    metadata: z.ZodOptional<z.ZodObject<{
+        author: z.ZodOptional<z.ZodString>;
+        license: z.ZodOptional<z.ZodString>;
+        homepage: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        author?: string | undefined;
+        license?: string | undefined;
+        homepage?: string | undefined;
+    }, {
+        author?: string | undefined;
+        license?: string | undefined;
+        homepage?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    schemaVersion: 1;
+    version: string;
+    source: {
+        type: "npm" | "git" | "local";
+        location: string;
+    };
+    checksum: string;
+    tools: {
+        description: string;
+        id: string;
+        name: string;
+    }[];
+    capabilities: {
+        tool_id: string;
+        verb: "read" | "fetch" | "send" | "write" | "delete" | "execute";
+        provenance: "declared" | "inferred";
+        resource?: string | undefined;
+        description?: string | undefined;
+    }[];
+    secrets: {
+        description: string;
+        id: string;
+        required: boolean;
+        used_by: string[];
+    }[];
+    metadata?: {
+        author?: string | undefined;
+        license?: string | undefined;
+        homepage?: string | undefined;
+    } | undefined;
+}, {
+    schemaVersion: 1;
+    version: string;
+    source: {
+        type: "npm" | "git" | "local";
+        location: string;
+    };
+    checksum: string;
+    tools: {
+        description: string;
+        id: string;
+        name: string;
+    }[];
+    capabilities: {
+        tool_id: string;
+        verb: "read" | "fetch" | "send" | "write" | "delete" | "execute";
+        provenance: "declared" | "inferred";
+        resource?: string | undefined;
+        description?: string | undefined;
+    }[];
+    secrets: {
+        description: string;
+        id: string;
+        required: boolean;
+        used_by: string[];
+    }[];
+    metadata?: {
+        author?: string | undefined;
+        license?: string | undefined;
+        homepage?: string | undefined;
+    } | undefined;
+}>;
+export type ServerManifest = z.infer<typeof ServerManifestSchema>;
+export type ValidationResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    errors: ValidationError[];
+};
+export interface ValidationError {
+    path: (string | number)[];
+    message: string;
+    code: string;
+}
+/**
+ * Parse and validate a server manifest from JSON.
+ * Returns detailed, human-readable errors on failure.
+ */
+export declare function parseManifest(input: unknown): ValidationResult<ServerManifest>;
+/**
+ * Validate a manifest instance. Useful after round-trip deserialization.
+ */
+export declare function validateManifest(manifest: unknown): ValidationResult<ServerManifest>;
+/**
+ * Type guard: is this a valid ServerManifest?
+ */
+export declare function isServerManifest(value: unknown): value is ServerManifest;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,UAAU,oEAOrB,CAAC;AAEH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAG9C,eAAO,MAAM,gBAAgB,qCAAmC,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;EAMhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,YAAY;;;;;;;;;EAGvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGlD,eAAO,MAAM,cAAc;;;;;;;;;;;;GAId,CAAC;AAEd,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAGtD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAc9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAEpF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAGxE"}

package/dist/schema.js

@@ -0,0 +1,85 @@
+import { z } from 'zod';
+// Verb vocabulary: each maps to a distinct threat model
+export const VerbSchema = z.enum([
+    'read', // read access to data
+    'fetch', // reach out and pull something back (SSRF/prompt-injection risk)
+    'send', // push data externally (exfiltration risk)
+    'write', // write access to data
+    'delete', // delete data
+    'execute', // execute commands/code
+]);
+// Provenance: was this verb declared explicitly or inferred from tool analysis?
+export const ProvenanceSchema = z.enum(['declared', 'inferred']);
+// A single capability granted by a tool
+export const CapabilityEntrySchema = z.object({
+    tool_id: z.string().min(1, 'tool_id must not be empty'),
+    verb: VerbSchema,
+    resource: z.string().optional().describe('Resource identifier (e.g., "repo:owner/name", "filesystem:/*")'),
+    provenance: ProvenanceSchema,
+    description: z.string().optional().describe('Explanation for inferred verbs'),
+});
+// A secret required by one or more tools
+export const SecretDeclarationSchema = z.object({
+    id: z.string().min(1, 'Secret id must not be empty').regex(/^[A-Z_][A-Z0-9_]*$/, 'Secret id must be uppercase with underscores'),
+    description: z.string().min(1, 'description must not be empty'),
+    required: z.boolean(),
+    used_by: z.array(z.string().min(1)).describe('tool_ids that reference this secret'),
+});
+// Minimal tool metadata (capabilities are hoisted to manifest root)
+export const ToolDeclarationSchema = z.object({
+    id: z.string().min(1, 'tool id must not be empty'),
+    name: z.string().min(1, 'name must not be empty'),
+    description: z.string().min(1, 'description must not be empty'),
+});
+// Source location for the server
+export const SourceSchema = z.object({
+    type: z.enum(['npm', 'git', 'local']).describe('Source type'),
+    location: z.string().min(1, 'location must not be empty').describe('Package name, git URL, or local path'),
+});
+// Optional metadata about the server
+export const MetadataSchema = z.object({
+    author: z.string().optional(),
+    license: z.string().optional(),
+    homepage: z.string().url('homepage must be a valid URL').optional(),
+}).optional();
+// The canonical server manifest
+export const ServerManifestSchema = z.object({
+    schemaVersion: z.literal(1).describe('Manifest schema version'),
+    version: z.string().regex(/^\d+\.\d+\.\d+$/, 'version must be semver (e.g., "1.2.0")'),
+    source: SourceSchema,
+    checksum: z.string().min(1, 'checksum must not be empty').describe('sha256 hash of server artifact'),
+    tools: z.array(ToolDeclarationSchema).min(1, 'at least one tool must be declared'),
+    capabilities: z.array(CapabilityEntrySchema).min(0).describe('Hoisted to root for diff clarity'),
+    secrets: z.array(SecretDeclarationSchema).min(0).describe('Secrets with usage tracking'),
+    metadata: MetadataSchema,
+});
+/**
+ * Parse and validate a server manifest from JSON.
+ * Returns detailed, human-readable errors on failure.
+ */
+export function parseManifest(input) {
+    const result = ServerManifestSchema.safeParse(input);
+    if (result.success) {
+        return { ok: true, value: result.data };
+    }
+    const errors = result.error.issues.map(issue => ({
+        path: issue.path,
+        message: issue.message,
+        code: issue.code,
+    }));
+    return { ok: false, errors };
+}
+/**
+ * Validate a manifest instance. Useful after round-trip deserialization.
+ */
+export function validateManifest(manifest) {
+    return parseManifest(manifest);
+}
+/**
+ * Type guard: is this a valid ServerManifest?
+ */
+export function isServerManifest(value) {
+    const result = ServerManifestSchema.safeParse(value);
+    return result.success;
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wDAAwD;AACxD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,MAAM,EAAK,sBAAsB;IACjC,OAAO,EAAI,iEAAiE;IAC5E,MAAM,EAAK,2CAA2C;IACtD,OAAO,EAAI,uBAAuB;IAClC,QAAQ,EAAG,cAAc;IACzB,SAAS,EAAE,wBAAwB;CACpC,CAAC,CAAC;AAIH,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAGjE,wCAAwC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IACvD,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;IAC1G,UAAU,EAAE,gBAAgB;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CAC9E,CAAC,CAAC;AAIH,yCAAyC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,8CAA8C,CAAC;IAChI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;IAC/D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACpF,CAAC,CAAC;AAIH,oEAAoE;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;CAChE,CAAC,CAAC;AAIH,iCAAiC;AACjC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC7D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAC3G,CAAC,CAAC;AAIH,qCAAqC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAId,gCAAgC;AAChC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC/D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;IACtF,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAEpG,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IAClF,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAChG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAExF,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAeH;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAErD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAsB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@scopewatch/manifest",
+  "version": "0.0.1",
+  "description": "Manifest schema, parsing, validation, and migrations",
+  "license": "MIT",
+  "author": "Sathvik Putta <puttasathvik16@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/PuttaSathvik16/scopewatch.git",
+    "directory": "packages/manifest"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test --loader tsx 'test/**/*.test.ts'",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "tsx": "^4.19.0"
+  }
+}