apm-cli 0.28.0__tar.gz → 0.29.1__tar.gz

{apm_cli-0.28.0/src/apm_cli.egg-info → apm_cli-0.29.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: apm-cli
-Version: 0.28.0
+Version: 0.29.1
 Summary: MCP configuration tool
 Author-email: Daniel Meppiel <user@example.com>
 License: MIT License
@@ -78,7 +78,7 @@ Think `package.json`, `requirements.txt`, or `Cargo.toml` — but for AI agent c
 
 GitHub Copilot | Claude Code | Grok Build | Cursor | OpenCode | Codex | Gemini | Windsurf | Kiro
 
-**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[Roadmap](https://github.com/orgs/microsoft/projects/2304)**
+**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)**
 
 ---
 
@@ -239,7 +239,8 @@ Use agentrc to author high-quality instructions, then package them with APM to s
 
 Created by [@danielmeppiel](https://github.com/danielmeppiel). Maintained by [@danielmeppiel](https://github.com/danielmeppiel) and [@sergio-sisternes-epam](https://github.com/sergio-sisternes-epam).
 
-- [Roadmap & Discussions](https://github.com/microsoft/apm/discussions/116)
+- [v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)
+- [Discussions](https://github.com/microsoft/apm/discussions)
 - [Contributing](CONTRIBUTING.md)
 - [AI Native Development guide](https://danielmeppiel.github.io/awesome-ai-native) — a practical learning path for AI-native development
 

{apm_cli-0.28.0 → apm_cli-0.29.1}/README.md

@@ -6,7 +6,7 @@ Think `package.json`, `requirements.txt`, or `Cargo.toml` — but for AI agent c
 
 GitHub Copilot | Claude Code | Grok Build | Cursor | OpenCode | Codex | Gemini | Windsurf | Kiro
 
-**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[Roadmap](https://github.com/orgs/microsoft/projects/2304)**
+**[Documentation](https://microsoft.github.io/apm/)** · **[Quick Start](https://microsoft.github.io/apm/getting-started/quick-start/)** · **[CLI Reference](https://microsoft.github.io/apm/reference/cli-commands/)** · **[v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)**
 
 ---
 
@@ -167,7 +167,8 @@ Use agentrc to author high-quality instructions, then package them with APM to s
 
 Created by [@danielmeppiel](https://github.com/danielmeppiel). Maintained by [@danielmeppiel](https://github.com/danielmeppiel) and [@sergio-sisternes-epam](https://github.com/sergio-sisternes-epam).
 
-- [Roadmap & Discussions](https://github.com/microsoft/apm/discussions/116)
+- [v0.29 Roadmap](https://github.com/microsoft/apm/milestone/17)
+- [Discussions](https://github.com/microsoft/apm/discussions)
 - [Contributing](CONTRIBUTING.md)
 - [AI Native Development guide](https://danielmeppiel.github.io/awesome-ai-native) — a practical learning path for AI-native development
 

{apm_cli-0.28.0 → apm_cli-0.29.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "apm-cli"
-version = "0.28.0"
+version = "0.29.1"
 description = "MCP configuration tool"
 readme = "README.md"
 requires-python = ">=3.10"

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/base.py

@@ -7,7 +7,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, ClassVar
 
-from ...models.dependency.mcp import _RESERVED_EXTRA_KEYS
+from ...models.dependency.mcp import _EXTRA_DENYLIST, TrustedEnvLiteral
 from ...utils.console import _rich_error, _rich_warning
 
 _INPUT_VAR_RE = re.compile(r"\$\{input:([^}]+)\}")
@@ -185,9 +185,6 @@ def _docker_image_repository(reference: str) -> str:
 # not be injectable via passthrough. Enforced unconditionally per adapter path
 # (NOT guarded by "key absent from config"), so it also closes paths that do not
 # pre-set the key. Security boundary for PR #1765 / issue #1670.
-_EXTRA_DENYLIST = _RESERVED_EXTRA_KEYS | frozenset({"http_headers"})
-
-
 @dataclass(frozen=True)
 class _MCPLauncherArgumentGroup:
     """One atomic registry argument and its rendered argv values."""
@@ -1087,7 +1084,9 @@ class MCPClientAdapter(ABC):
                 if not isinstance(raw_value, str):
                     translated[name] = raw_value
                     continue
-                if _has_env_placeholder(raw_value):
+                if isinstance(raw_value, TrustedEnvLiteral):
+                    translated[name] = raw_value
+                elif _has_env_placeholder(raw_value):
                     self._last_legacy_angle_vars.update(_extract_legacy_angle_vars(raw_value))
                     translated[name] = self._translate_env_placeholder_for_runtime(raw_value)
                     placeholder_keys.extend(

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/codex.py

@@ -12,6 +12,7 @@ from ...registry.client import SimpleRegistryClient
 from ...registry.integration import RegistryIntegration
 from ...utils.atomic_io import atomic_write_text
 from ...utils.console import _rich_success, _rich_warning
+from ...utils.net import is_loopback_host
 from ...utils.path_security import PathTraversalError
 from ._mcp_runtime_args import process_v01_value_hint_arg
 from .base import MCPClientAdapter
@@ -41,8 +42,9 @@ class CodexClientAdapter(MCPClientAdapter):
 
         Args:
             registry_url (str, optional): URL of the MCP registry.
-                If not provided, uses the MCP_REGISTRY_URL environment variable
-                or falls back to the default GitHub registry.
+                If not provided, resolves the MCP_REGISTRY_URL env var,
+                then ``apm config set mcp-registry-url``, then the public
+                default (see ``registry.client.resolve_mcp_registry_url``).
             project_root: Project root used to resolve project-local Codex
                 config paths.
             user_scope: Whether the adapter should resolve user-scope Codex
@@ -216,6 +218,8 @@ class CodexClientAdapter(MCPClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(
@@ -239,7 +243,8 @@ class CodexClientAdapter(MCPClientAdapter):
         # Precedence on Codex when a server publishes BOTH a remote and a stdio
         # package: prefer the stdio package (falls through to the packages branch
         # below). The remote-only branch here handles the streamable-http path
-        # and rejects SSE / non-https / empty-url remotes with explicit warnings.
+        # and rejects SSE / non-https (except loopback http) / empty-url remotes
+        # with explicit warnings.
         remotes = server_info.get("remotes", [])
         packages = server_info.get("packages", [])
         if remotes and not packages:
@@ -263,11 +268,22 @@ class CodexClientAdapter(MCPClientAdapter):
                 )
                 return None
 
-            scheme = urlparse(remote_url).scheme.lower()
-            if scheme != "https":
+            try:
+                parsed_remote = urlparse(remote_url)
+                scheme = parsed_remote.scheme.lower()
+                insecure_loopback = scheme == "http" and is_loopback_host(parsed_remote.hostname)
+            except ValueError:
+                scheme = ""
+                insecure_loopback = False
+            # Codex CLI itself accepts plain-http loopback URLs (its docs use
+            # http://localhost examples), and local dev servers rarely carry
+            # certs -- so loopback http is allowed. Any other non-https host is
+            # still rejected to avoid cleartext bearer tokens in transit.
+            if scheme != "https" and not insecure_loopback:
                 _rich_warning(
                     f"Skipping MCP server '{server_name}' for Codex CLI: remote URL "
-                    f"must use https:// (got {scheme or 'no scheme'}).",
+                    f"must use https:// (got {scheme or 'no scheme'}). "
+                    "Plain http is allowed for loopback addresses only.",
                     symbol="warning",
                 )
                 return None

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/copilot.py

@@ -1,8 +1,8 @@
 """GitHub Copilot CLI implementation of MCP client adapter.
 
-This adapter implements the Copilot CLI-specific handling of MCP server configuration,
-targeting the global ~/.copilot/mcp-config.json file as specified in the MCP installation
-architecture specification.
+This adapter implements the Copilot-specific handling of MCP server configuration.
+At project scope it targets .github/mcp.json (read by Copilot CLI); at user scope
+it targets the global ~/.copilot/mcp-config.json file.
 """
 
 import json
@@ -13,6 +13,7 @@ from typing import ClassVar
 import click
 
 from ...core.token_manager import GitHubTokenManager
+from ...models.dependency.mcp import TrustedEnvLiteral
 from ...registry.client import SimpleRegistryClient
 from ...registry.integration import RegistryIntegration
 from ...utils.console import _rich_warning
@@ -91,8 +92,9 @@ class CopilotClientAdapter(MCPClientAdapter):
 
         Args:
             registry_url (str, optional): URL of the MCP registry.
-                If not provided, uses the MCP_REGISTRY_URL environment variable
-                or falls back to the default GitHub registry.
+                If not provided, resolves the MCP_REGISTRY_URL env var,
+                then ``apm config set mcp-registry-url``, then the public
+                default (see ``registry.client.resolve_mcp_registry_url``).
             project_root: Project root context passed through to the base
                 adapter for scope-aware operations.
             user_scope: Whether the adapter should resolve user-scope config
@@ -103,13 +105,23 @@ class CopilotClientAdapter(MCPClientAdapter):
         self.registry_integration = RegistryIntegration(registry_url)
 
     def get_config_path(self):
-        """Get the path to the Copilot CLI MCP configuration file.
+        """Get the path to the Copilot MCP configuration file.
+
+        At user scope returns the global Copilot CLI config so MCP servers are
+        available across all projects. At project scope returns the per-repo
+        .github/mcp.json path that Copilot CLI reads since deprecating
+        .vscode/mcp.json.
 
         Returns:
-            str: Path to ~/.copilot/mcp-config.json
+            str: Path to the MCP configuration file.
         """
-        copilot_dir = Path.home() / ".copilot"
-        return str(copilot_dir / "mcp-config.json")
+        if self.user_scope:
+            configured_home = os.environ.get("COPILOT_HOME", "").strip()
+            copilot_home = (
+                Path(configured_home).expanduser() if configured_home else Path.home() / ".copilot"
+            )
+            return str(copilot_home / "mcp-config.json")
+        return str(self.project_root / ".github" / "mcp.json")
 
     def update_config(self, config_updates):
         """Update the Copilot CLI MCP configuration.
@@ -423,6 +435,8 @@ class CopilotClientAdapter(MCPClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(
@@ -723,7 +737,9 @@ class CopilotClientAdapter(MCPClientAdapter):
                 if not isinstance(raw_value, str):
                     translated[name] = _stringify_env_literal(raw_value)
                     continue
-                if _has_env_placeholder(raw_value):
+                if isinstance(raw_value, TrustedEnvLiteral):
+                    translated[name] = raw_value
+                elif _has_env_placeholder(raw_value):
                     self._last_legacy_angle_vars.update(_extract_legacy_angle_vars(raw_value))
                     translated[name] = self._translate_env_placeholder_for_runtime(raw_value)
                     for match in _ENV_VAR_RE.finditer(translated[name]):

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/cursor.py

@@ -134,6 +134,8 @@ class CursorClientAdapter(CopilotClientAdapter):
         if raw:
             config["type"] = "stdio"
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/gemini.py

@@ -31,6 +31,7 @@ import logging
 import os
 from pathlib import Path
 
+from ...utils.atomic_io import atomic_write_text
 from ...utils.console import _rich_error, _rich_success
 from .copilot import CopilotClientAdapter
 
@@ -102,8 +103,11 @@ class GeminiClientAdapter(CopilotClientAdapter):
                 "Creating %s for %s user configuration", config_path.parent, self.target_name
             )
         config_path.parent.mkdir(parents=True, exist_ok=True)
-        with open(config_path, "w", encoding="utf-8") as f:
-            json.dump(current_config, f, indent=2)
+        atomic_write_text(
+            config_path,
+            json.dumps(current_config, indent=2),
+            new_file_mode=0o600,
+        )
         os.chmod(config_path, 0o600)
 
     def get_current_config(self):
@@ -148,6 +152,8 @@ class GeminiClientAdapter(CopilotClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config["command"] = raw["command"]
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/intellij.py

@@ -91,6 +91,74 @@ def _legacy_intellij_config_dir() -> Path | None:
     return root.joinpath(*_CONFIG_SUFFIX)
 
 
+def _strip_jsonc_comments(raw: str) -> str:
+    """Strip JSONC comments while preserving string contents and line layout."""
+    chars = list(raw)
+    in_string = False
+    escaped = False
+    i = 0
+    while i < len(chars):
+        ch = chars[i]
+        if in_string:
+            if escaped:
+                escaped = False
+            elif ch == "\\":
+                escaped = True
+            elif ch == '"':
+                in_string = False
+            i += 1
+            continue
+        if ch == '"':
+            in_string = True
+            i += 1
+            continue
+        if ch == "/" and i + 1 < len(chars) and chars[i + 1] == "/":
+            j = i
+            while j < len(chars) and chars[j] not in "\r\n":
+                chars[j] = " "
+                j += 1
+            i = j
+            continue
+        if ch == "/" and i + 1 < len(chars) and chars[i + 1] == "*":
+            end = raw.find("*/", i + 2)
+            if end == -1:
+                return raw
+            for j in range(i, end + 2):
+                if chars[j] not in "\r\n":
+                    chars[j] = " "
+            i = end + 2
+            continue
+        i += 1
+    return "".join(chars)
+
+
+def _strip_jsonc_trailing_commas(raw: str) -> str:
+    """Blank trailing commas outside strings so strict JSON parsing accepts JSONC."""
+    chars = list(raw)
+    in_string = False
+    escaped = False
+    for index, char in enumerate(chars):
+        if in_string:
+            if escaped:
+                escaped = False
+            elif char == "\\":
+                escaped = True
+            elif char == '"':
+                in_string = False
+            continue
+        if char == '"':
+            in_string = True
+            continue
+        if char != ",":
+            continue
+        next_index = index + 1
+        while next_index < len(chars) and chars[next_index].isspace():
+            next_index += 1
+        if next_index < len(chars) and chars[next_index] in "}]":
+            chars[index] = " "
+    return "".join(chars)
+
+
 def _config_without_servers(
     config: dict,
     names: set[str],
@@ -153,7 +221,7 @@ class IntelliJClientAdapter(CopilotClientAdapter):
                 "Check its permissions and UTF-8 encoding, then rerun apm install."
             ) from exc
         try:
-            config = json.loads(raw)
+            config = json.loads(_strip_jsonc_trailing_commas(_strip_jsonc_comments(raw)))
         except json.JSONDecodeError as exc:
             raise IntelliJConfigError(
                 f"JetBrains Copilot MCP config at '{path}' is malformed JSON ({exc}). "

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/kiro.py

@@ -116,6 +116,8 @@ class KiroClientAdapter(CopilotClientAdapter):
         raw = server_info.get("_raw_stdio")
         if raw:
             config: dict[str, Any] = {"command": raw["command"]}
+            if raw.get("cwd") is not None:
+                config["cwd"] = raw["cwd"]
             resolved_env_for_args: dict[str, Any] = {}
             if raw.get("env"):
                 resolved_env_for_args = self._resolve_environment_variables(

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/opencode.py

@@ -30,6 +30,7 @@ import json
 import os
 from pathlib import Path
 
+from ...models.dependency.mcp import _EXTRA_DENYLIST
 from .copilot import CopilotClientAdapter
 
 
@@ -153,4 +154,9 @@ class OpenCodeClientAdapter(CopilotClientAdapter):
         if env:
             entry["environment"] = dict(env)
 
+        translated_keys = _EXTRA_DENYLIST
+        for key, value in copilot_entry.items():
+            if key not in translated_keys and key not in entry:
+                entry[key] = value
+
         return entry

{apm_cli-0.28.0 → apm_cli-0.29.1}/src/apm_cli/adapters/client/vscode.py

@@ -49,8 +49,9 @@ class VSCodeClientAdapter(MCPClientAdapter):
 
         Args:
             registry_url (str, optional): URL of the MCP registry.
-                If not provided, uses the MCP_REGISTRY_URL environment variable
-                or falls back to the default demo registry.
+                If not provided, resolves the MCP_REGISTRY_URL env var,
+                then ``apm config set mcp-registry-url``, then the public
+                default (see ``registry.client.resolve_mcp_registry_url``).
             project_root: Project root used to resolve the repository-local
                 `.vscode/mcp.json` path.
             user_scope: Whether to resolve user-scope config paths instead of
@@ -277,6 +278,8 @@ class VSCodeClientAdapter(MCPClientAdapter):
                 "command": raw["command"],
                 "args": raw["args"],
             }
+            if raw.get("cwd") is not None:
+                server_config["cwd"] = raw["cwd"]
             if raw.get("env"):
                 # Translate bare ${VAR} -> ${env:VAR} so VS Code's runtime env
                 # interpolation resolves them at server-start. ${input:...}

apm_cli-0.29.1/src/apm_cli/agent_plugins/__init__.py

@@ -0,0 +1,146 @@
+"""Agent Plugins v1 contract helpers."""
+
+from .assets import AssetInventoryError, open_verified_asset
+from .constants import (
+    AGENT_PLUGINS_SCHEMA_PREFIX,
+    AGENT_PLUGINS_SITE_COMMIT,
+    AGENT_PLUGINS_SPEC_COMMIT,
+    AGENT_PLUGINS_SPEC_SHA256,
+    AGENT_PLUGINS_VERSION,
+    COM_MICROSOFT_APM_NAMESPACE,
+    COM_MICROSOFT_APM_SCHEMA_VERSION,
+    MAX_COMPONENT_ASSET_BYTES,
+    MAX_COMPONENT_ASSET_ENTRIES,
+    MCP_SCHEMA_ID,
+    MCP_SCHEMA_SHA256,
+    PLUGIN_SCHEMA_ID,
+    PLUGIN_SCHEMA_SHA256,
+    SUPPORTED_MCP_SCHEMA_IDS,
+    SUPPORTED_PLUGIN_SCHEMA_IDS,
+)
+from .errors import (
+    AgentPluginDeploymentBoundaryError,
+    AgentPluginError,
+    AgentPluginLegacyBoundaryError,
+    AgentPluginManifestAuthorityError,
+    AgentPluginManifestError,
+    NotAgentPluginError,
+    UnsupportedAgentPluginVersionError,
+)
+from .io import MAX_JSON_BYTES, read_json_document
+from .ir import (
+    AgentPlugin,
+    AgentPluginAsset,
+    AgentPluginComponents,
+    AgentPluginDetection,
+    AgentPluginDiagnostic,
+    AgentPluginExecutable,
+    AgentPluginIdentity,
+    AgentPluginMcpServer,
+    AgentPluginSkill,
+    ApmConfiguration,
+    ApmExtensionData,
+    DiagnosticSeverity,
+    FrozenJsonArray,
+    FrozenJsonObject,
+    FrozenJsonValue,
+    JsonValue,
+    McpServerType,
+    SourceProvenance,
+    thaw_frozen_json,
+)
+from .loader import (
+    admit_legacy_plugin_manifest,
+    detect_agent_plugin,
+    load_agent_plugin,
+    reject_agent_plugin_legacy_normalization,
+)
+from .validation import (
+    ValidationResult,
+    args_contain_literal_secret,
+    contains_literal_secret_fields,
+    is_agent_plugin_schema_id,
+    schema_version_from_id,
+    supports_mcp_schema_id,
+    supports_plugin_schema_id,
+    url_contains_literal_secret,
+    validate_mcp_config_document,
+    validate_mcp_config_file,
+    validate_plugin_manifest_document,
+    validate_plugin_manifest_file,
+)
+
+
+def __getattr__(name: str) -> object:
+    """Lazily expose compatibility projection without a models import cycle."""
+    if name != "project_agent_plugin_package":
+        raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
+    from .projection import project_agent_plugin_package
+
+    return project_agent_plugin_package
+
+
+__all__ = [
+    "AGENT_PLUGINS_SCHEMA_PREFIX",
+    "AGENT_PLUGINS_SITE_COMMIT",
+    "AGENT_PLUGINS_SPEC_COMMIT",
+    "AGENT_PLUGINS_SPEC_SHA256",
+    "AGENT_PLUGINS_VERSION",
+    "COM_MICROSOFT_APM_NAMESPACE",
+    "COM_MICROSOFT_APM_SCHEMA_VERSION",
+    "MAX_COMPONENT_ASSET_BYTES",
+    "MAX_COMPONENT_ASSET_ENTRIES",
+    "MAX_JSON_BYTES",
+    "MCP_SCHEMA_ID",
+    "MCP_SCHEMA_SHA256",
+    "PLUGIN_SCHEMA_ID",
+    "PLUGIN_SCHEMA_SHA256",
+    "SUPPORTED_MCP_SCHEMA_IDS",
+    "SUPPORTED_PLUGIN_SCHEMA_IDS",
+    "AgentPlugin",
+    "AgentPluginAsset",
+    "AgentPluginComponents",
+    "AgentPluginDeploymentBoundaryError",
+    "AgentPluginDetection",
+    "AgentPluginDiagnostic",
+    "AgentPluginError",
+    "AgentPluginExecutable",
+    "AgentPluginIdentity",
+    "AgentPluginLegacyBoundaryError",
+    "AgentPluginManifestAuthorityError",
+    "AgentPluginManifestError",
+    "AgentPluginMcpServer",
+    "AgentPluginSkill",
+    "ApmConfiguration",
+    "ApmExtensionData",
+    "AssetInventoryError",
+    "DiagnosticSeverity",
+    "FrozenJsonArray",
+    "FrozenJsonObject",
+    "FrozenJsonValue",
+    "JsonValue",
+    "McpServerType",
+    "NotAgentPluginError",
+    "SourceProvenance",
+    "UnsupportedAgentPluginVersionError",
+    "ValidationResult",
+    "admit_legacy_plugin_manifest",
+    "args_contain_literal_secret",
+    "contains_literal_secret_fields",
+    "detect_agent_plugin",
+    "is_agent_plugin_schema_id",
+    "load_agent_plugin",
+    "open_verified_asset",
+    "project_agent_plugin_package",
+    "read_json_document",
+    "reject_agent_plugin_legacy_normalization",
+    "schema_version_from_id",
+    "supports_mcp_schema_id",
+    "supports_plugin_schema_id",
+    "thaw_frozen_json",
+    "url_contains_literal_secret",
+    "validate_mcp_config_document",
+    "validate_mcp_config_file",
+    "validate_plugin_manifest_document",
+    "validate_plugin_manifest_file",
+]