Crate mcpact_manifest 

Manifest parser, schema, and validator.

Structs

ArgSpec

Argument contract.

AuditSpec

Audit settings.

CliSpec

CLI binary metadata.

ConformanceCorpus

A parsed, structurally-validated conformance corpus.

EnvSpec

Environment policy.

Manifest

McPact manifest.

OutputSpec

Output contract.

PackageSignature

Ed25519 manifest signature metadata.

PackageSpec

Generated package metadata.

PolicySpec

Policy declaration.

ReplayOutcome

Outcome of replaying a corpus against a built MCP server.

ToolSpec

Tool contract.

TrustAnchor

A set of authorized publisher public keys (decoded 32-byte ed25519 keys).

ValidationReport

Validation report.

Enums

ArgType

Supported argument types.

CorpusError

Why a conformance corpus failed to parse / validate.

ManifestError

Manifest errors.

ReplayError

Why a replay could not be performed at all (distinct from a replay that ran and produced a failing ReplayOutcome).

SignatureTrust

Outcome classification for verify_package_signature_trusted.

Constants

ALGORITHM_ED25519

Supported signature algorithm name.

SCHEMA_VERSION

Current manifest schema version.

TRUSTED_KEYS_ENV

Environment variable holding the set of authorized publisher public keys.

Functions

is_valid_arg_name

Validate generated Rust field name subset.

is_valid_tool_name

Validate MCP-compatible tool name subset.

parse_signing_seed

Parse a 32-byte ed25519 seed from hex (64 chars) or standard base64.

resolve_audit_jsonl_path

Resolve JSONL audit file path from manifest [audit] and package name.

resolve_audit_jsonl_path_beside_manifest

Resolve JSONL path relative to a base directory (CLI validate beside manifest).

sign_manifest

Attach an ed25519 signature to manifest.package.signature.

signing_digest

SHA-256 digest of the canonical signing payload.

signing_payload

Canonical unsigned manifest bytes used for signing and verification.

verify_package_signature

Verify package.signature on a manifest (integrity only).

verify_package_signature_trusted

Trust-anchored verification using the TRUSTED_KEYS_ENV allow-list.

verify_package_signature_with_anchor

Verify package.signature AND require the embedded key to be in anchor.

verify_signature_fields

Verify explicit signature fields against manifest payload.