systemprompt-models 0.64.0

//! Signed manifest wire format.
//!
//! `GET /v1/bridge/manifest` returns a [`SignedManifestEnvelope`]: the
//! JCS-canonical serialization of a [`SignedManifest`] carried verbatim as
//! `payload`, plus a detached ed25519 signature over those exact bytes. The
//! bridge verifies the signature against the raw `payload` string *before*
//! deserialising it, so fields added to [`SignedManifest`] in newer gateways
//! never invalidate the signature on older bridges — unknown fields are
//! simply ignored at parse time. Semantic breaks that an older bridge cannot
//! safely ignore are declared by raising `min_schema_version` above
//! [`MANIFEST_SCHEMA_VERSION`] of the consuming bridge, which then refuses
//! with an upgrade message instead of a signature error.
//!
//! Signing, signature verification, and manifest construction live in
//! the bridge crate (`bin/bridge/src/gateway/manifest.rs`) alongside
//! the gateway client. Those layers pull in `ed25519-dalek` and
//! `serde_jcs` which are not appropriate dependencies for this
//! foundation crate.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

mod entries;
mod external;
mod managed_mcp;
/// Platform-owned `SKILL.md` frontmatter keys and the passthrough renderer.
pub mod skill_frontmatter;

use std::collections::BTreeMap;

use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};

pub use crate::bridge::ids::ManifestSignature;
use crate::bridge::manifest_version::ManifestVersion;
use crate::bridge::update_policy::AutoUpdatePolicy;
use systemprompt_identifiers::{ApiKeyId, MarketplaceId, PluginId, TenantId, UserId};

pub use entries::{
    AgentEntry, ArtifactEntry, HookEntry, PluginEntry, PluginFile, RuleEntry, SkillEntry,
    SkillPublication,
};
pub use external::{
    ExternalPluginSkills, ManifestExternalMarketplace, ManifestExternalMarketplaceSource,
    ManifestExternalPlugin, ManifestExternalPluginSource,
};
pub use managed_mcp::ManagedMcpServer;

pub const MANIFEST_SCHEMA_VERSION: u32 = 1;

#[must_use]
pub const fn min_bridge_version() -> semver::Version {
    semver::Version::new(0, 28, 0)
}

// Why: a 0.62 bridge parses `external_marketplaces[].source` strictly, so a
// source carrying `ref` fails its manifest parse; requiring 0.63 turns that
// into the bridge's upgrade-required refusal.
pub const EXTERNAL_MARKETPLACE_REF_MIN_BRIDGE: semver::Version = semver::Version::new(0, 63, 0);

#[must_use]
pub fn manifest_min_bridge_version(marketplaces: &[ManifestMarketplace]) -> semver::Version {
    let floor = min_bridge_version();
    let carries_ref = marketplaces
        .iter()
        .flat_map(|marketplace| &marketplace.external_marketplaces)
        .any(|external| external.source.reference.is_some());
    if carries_ref {
        floor.max(EXTERNAL_MARKETPLACE_REF_MIN_BRIDGE)
    } else {
        floor
    }
}

#[must_use]
pub fn bridge_version_is_supported(reported: &str, floor: &semver::Version) -> bool {
    // Why: a version that cannot be parsed cannot be shown to meet the
    // floor, so it is refused rather than admitted.
    semver::Version::parse(reported).is_ok_and(|reported| reported >= *floor)
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SignedManifestEnvelope {
    pub payload: String,
    pub signature: ManifestSignature,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SignedManifest {
    #[serde(default)]
    pub min_schema_version: u32,
    #[serde(default)]
    pub min_bridge_version: Option<semver::Version>,
    pub manifest_version: ManifestVersion,
    pub issued_at: DateTime<Utc>,
    pub not_before: DateTime<Utc>,
    pub user_id: UserId,
    pub tenant_id: Option<TenantId>,
    #[serde(default)]
    pub user: Option<UserInfo>,
    pub plugins: Vec<PluginEntry>,
    #[serde(default)]
    pub skills: Vec<SkillEntry>,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub rules: Vec<RuleEntry>,
    #[serde(default)]
    pub agents: Vec<AgentEntry>,
    #[serde(default)]
    pub hooks: Vec<HookEntry>,
    pub managed_mcp_servers: Vec<ManagedMcpServer>,
    pub revocations: Vec<ApiKeyId>,
    #[serde(default)]
    pub enabled_hosts: Vec<String>,
    #[serde(default)]
    pub host_model_protocols: BTreeMap<String, Vec<String>>,
    #[serde(default)]
    pub artifacts: Vec<ArtifactEntry>,
    #[serde(default)]
    pub allow_claude_ai_connectors: bool,
    #[serde(
        default,
        skip_serializing_if = "crate::bridge::desktop_policy::DesktopPolicy::is_empty"
    )]
    pub desktop_policy: crate::bridge::desktop_policy::DesktopPolicy,
    #[serde(default)]
    pub auto_update: AutoUpdatePolicy,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub diagnostics: Vec<String>,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub marketplaces: Vec<ManifestMarketplace>,
}

/// An enabled marketplace and the manifest plugins it carries, after the
/// per-user filter: `plugin_ids` never names a plugin absent from `plugins`.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
pub struct ManifestMarketplace {
    pub id: MarketplaceId,
    pub name: String,
    pub plugin_ids: Vec<PluginId>,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub allow_cross_marketplace_dependencies_on: Vec<String>,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub external_marketplaces: Vec<ManifestExternalMarketplace>,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    pub external_plugins: Vec<ManifestExternalPlugin>,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub claude_code: Option<ManifestClaudeCode>,
}

/// The Claude Code client settings a marketplace asks the bridge to write.
///
/// Tolerant of unknown keys, unlike the kit-side
/// `ClaudeCodeMarketplaceConfig` (services manifest),
/// so a bridge ignores a setting a newer gateway adds.
#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Serialize, Deserialize)]
pub struct ManifestClaudeCode {
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub skill_listing_budget_chars: Option<u32>,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct UserInfo {
    pub id: UserId,
    pub name: String,
    pub email: String,
    #[serde(default)]
    pub display_name: Option<String>,
    #[serde(default)]
    pub roles: Vec<String>,
}