{"_id":"@adea-ai/catalog-schema","_rev":"8-e6b931626af4e4c4a41f3f7a65f91710","name":"@adea-ai/catalog-schema","dist-tags":{"latest":"1.4.1"},"versions":{"1.1.3":{"name":"@adea-ai/catalog-schema","version":"1.1.3","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"license":"Apache-2.0","_id":"@adea-ai/catalog-schema@1.1.3","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"homepage":"https://github.com/adea-ai/plugins#readme","bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"dist":{"shasum":"8fabf4c53761b8c21d0a5e41201bf4ae07b2d620","tarball":"https://registry.npmjs.org/@adea-ai/catalog-schema/-/catalog-schema-1.1.3.tgz","fileCount":9,"integrity":"sha512-BISDem8O0bNaz9GsHufn+wsHGMtGIvwF41lSr+odmGeCQ0ZM4zLOfUO53wjomCm+3JB7mkPOmJRHf51em8y7RQ==","signatures":[{"sig":"MEUCIANLUYgmtPoapOsnBiu5bIxuuRuZO0zLPqR2w7x55Ve3AiEAzPL0bOaOW8A+W48zFw+mH4aPQ5idRwPDTURM8cCZupA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adea-ai%2fcatalog-schema@1.1.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":63792},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.4.0 <2","node":">=24 <25"},"exports":{".":{"bun":"./src/index.ts","types":"./dist/index.d.ts","import":"./dist/index.js"},"./schema/*":"./schemas/*"},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"},"deprecated":"Legacy split package superseded by the consolidated @adea-ai/plugins v2 distribution; use @adea-ai/plugins for new releases.","repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"_npmVersion":"11.19.0","description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","directories":{},"_nodeVersion":"24.20.0","dependencies":{"zod":"^4.5.4"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{},"peerDependencies":{},"_npmOperationalInternal":{"tmp":"tmp/catalog-schema_1.1.3_1788802769721_0.7406834445868418","host":"s3://npm-registry-packages-npm-production"}},"1.1.4":{"name":"@adea-ai/catalog-schema","version":"1.1.4","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"license":"Apache-2.0","_id":"@adea-ai/catalog-schema@1.1.4","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"homepage":"https://github.com/adea-ai/plugins#readme","bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"dist":{"shasum":"987d1bf5fcc0ce1e8c39df1e5686e58288553ef2","tarball":"https://registry.npmjs.org/@adea-ai/catalog-schema/-/catalog-schema-1.1.4.tgz","fileCount":10,"integrity":"sha512-sQzzAbB0Bo9DVaSon6GJFgPevad5VV1uK69WSyzpQE4vFOCXuiUKclbZ4Z7GjElNl/VfBO4JNi4GK2toAE1aVA==","signatures":[{"sig":"MEUCIEipUvL2EbjTKVz7Ypcfv/TqIShzviyOuzLBWAgP86EBAiEAxCU1sy9SOug/zV4rXJBqEgIXVUVhfnxJCvpfNCAv2so=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adea-ai%2fcatalog-schema@1.1.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":72605},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.4.0 <2","node":">=24 <25"},"exports":{".":{"bun":"./src/index.ts","types":"./dist/index.d.ts","import":"./dist/index.js"},"./schema/*":"./schemas/*"},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"},"repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"_npmVersion":"11.19.0","description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","directories":{},"_nodeVersion":"24.20.0","dependencies":{"zod":"^4.5.4"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{},"peerDependencies":{},"_npmOperationalInternal":{"tmp":"tmp/catalog-schema_1.1.4_1788803699442_0.2181039314810711","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Legacy split package superseded by the consolidated @adea-ai/plugins v2 distribution; use @adea-ai/plugins for new releases."},"1.2.0":{"name":"@adea-ai/catalog-schema","version":"1.2.0","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"license":"Apache-2.0","_id":"@adea-ai/catalog-schema@1.2.0","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"homepage":"https://github.com/adea-ai/plugins#readme","bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"dist":{"shasum":"2213b231542ce75934fb1bd36a836ea16636dc89","tarball":"https://registry.npmjs.org/@adea-ai/catalog-schema/-/catalog-schema-1.2.0.tgz","fileCount":10,"integrity":"sha512-1HfvfIizAuFQ7d0NEKB+L+9kif1DqCDegoE6zqgzEC+0PSDgdajge4sx4VF60BsoLQMcFbvRvn4+JhUBX1/UuA==","signatures":[{"sig":"MEYCIQCz3MlxyGZEWFqXVSoHX63MnGJj4LbdJfy+wTkI4rGYAAIhAIHZ2U3DbitU5/Nwxo7Bhc/i5ZQ5hvBMNt3yLr2LgeBF","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adea-ai%2fcatalog-schema@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":72605},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.4.0 <2","node":">=24 <25"},"exports":{".":{"bun":"./src/index.ts","types":"./dist/index.d.ts","import":"./dist/index.js"},"./schema/*":"./schemas/*"},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:1cb706f5-2f3e-4fcf-8bbf-0ee9907c9c50"}},"repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"_npmVersion":"11.19.0","description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","directories":{},"_nodeVersion":"24.20.0","dependencies":{"zod":"^4.5.4"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{},"peerDependencies":{},"_npmOperationalInternal":{"tmp":"tmp/catalog-schema_1.2.0_1788889151484_0.902776930301258","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Legacy split package superseded by the consolidated @adea-ai/plugins v2 distribution; use @adea-ai/plugins for new releases."},"1.3.0":{"name":"@adea-ai/catalog-schema","version":"1.3.0","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"license":"Apache-2.0","_id":"@adea-ai/catalog-schema@1.3.0","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"homepage":"https://github.com/adea-ai/plugins#readme","bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"dist":{"shasum":"c7c4b568e969a33e4da68a811b54e710e7cef721","tarball":"https://registry.npmjs.org/@adea-ai/catalog-schema/-/catalog-schema-1.3.0.tgz","fileCount":18,"integrity":"sha512-tAsa41STOl0u1hc/yczd6+4nipjJ3hJoQVodCKsLUTQgWsMtTxOdu1ORFuNwXm42ZcdoHr1UZNWM4wEjBF42GQ==","signatures":[{"sig":"MEUCIQCHD2ZWo4DbqH5cBLISX8sOO8nSgswAS1qLxQLK7IbDrwIgFbmLMMRdoor5fLoLPFAbEQo08qtIZgc1U5U+Oxapey8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adea-ai%2fcatalog-schema@1.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":142380},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.4.0 <2","node":">=24 <25"},"exports":{".":{"bun":"./src/index.ts","types":"./dist/index.d.ts","import":"./dist/index.js"},"./schema/*":"./schemas/*","./agent-plugins":{"bun":"./src/agent-plugins.ts","types":"./dist/agent-plugins.d.ts","import":"./dist/agent-plugins.js"}},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:1cb706f5-2f3e-4fcf-8bbf-0ee9907c9c50"}},"repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"_npmVersion":"11.19.0","description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","directories":{},"_nodeVersion":"24.20.0","dependencies":{"zod":"^4.5.4"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{},"peerDependencies":{},"_npmOperationalInternal":{"tmp":"tmp/catalog-schema_1.3.0_1788979845846_0.7563421409268769","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Legacy split package superseded by the consolidated @adea-ai/plugins v2 distribution; use @adea-ai/plugins for new releases."},"1.4.0":{"name":"@adea-ai/catalog-schema","version":"1.4.0","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"license":"Apache-2.0","_id":"@adea-ai/catalog-schema@1.4.0","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"homepage":"https://github.com/adea-ai/plugins#readme","bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"dist":{"shasum":"7b908425bce270c93af74e5b3804056543bb1aff","tarball":"https://registry.npmjs.org/@adea-ai/catalog-schema/-/catalog-schema-1.4.0.tgz","fileCount":18,"integrity":"sha512-edB8dMSNUhqXJT+9cIgfNkguyqo8oFsM1IChPjRIcp42BKEFNcTvs10WPtoZuY4o8VhWJ8Nm7uk9FZHJAEuaXg==","signatures":[{"sig":"MEYCIQC2E7gEsYcV796RylM4SjZD+AJlSNKP3TcR2WnWG/xyowIhAJBlaW9HO7DmBnmuZXqXY0cvtWsCGv1CFBPObiGpWk3n","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIFyd5pm/NYC/jbOsJHvL70eN4b8rpTt3KF54UepmXXSKAiEA68EyOiR/Pc/t83ez+/FFEJkoQ7lKd6+8wFE7GXfKLRg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adea-ai%2fcatalog-schema@1.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":152985},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.4.0 <2","node":">=24 <25"},"exports":{".":{"bun":"./src/index.ts","types":"./dist/index.d.ts","import":"./dist/index.js"},"./schema/*":"./schemas/*","./agent-plugins":{"bun":"./src/agent-plugins.ts","types":"./dist/agent-plugins.d.ts","import":"./dist/agent-plugins.js"}},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:1cb706f5-2f3e-4fcf-8bbf-0ee9907c9c50"}},"repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"_npmVersion":"11.19.0","description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","directories":{},"_nodeVersion":"24.21.0","dependencies":{"zod":"^4.5.4"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{},"peerDependencies":{},"_npmOperationalInternal":{"tmp":"tmp/catalog-schema_1.4.0_1790281668121_0.46079054538351416","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Legacy split package superseded by the consolidated @adea-ai/plugins v2 distribution; use @adea-ai/plugins for new releases."},"1.4.1":{"name":"@adea-ai/catalog-schema","version":"1.4.1","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"license":"Apache-2.0","_id":"@adea-ai/catalog-schema@1.4.1","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"homepage":"https://github.com/adea-ai/plugins#readme","bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"dist":{"shasum":"5a4e5ba24afa85bdaf96bdfa950abf15249fa781","tarball":"https://registry.npmjs.org/@adea-ai/catalog-schema/-/catalog-schema-1.4.1.tgz","fileCount":18,"integrity":"sha512-aw9Y6FjmsOV7RM8WVMQiGkhn1P5PVvWVhE+UzVM3BUHzIiKHp6zx373932KwEYvC2A+5gd8BH6r3PJmm8rWTKw==","signatures":[{"sig":"MEQCIA8jQlrQgdSeK/qH12XUe9BElu82g55wGltNvOwDVIT3AiAYFiDZqntt5PWf/741HKE1teBbVWBxhtAs8dd104+QKA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIHmnF59NvwqiEkLIizpbvUWFU/DA+E01gAIuJhYHdmkeAiBYIHe1VW3bC9ZG3sEjhCDt37XVyLLi85p6NyES6XYo+Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adea-ai%2fcatalog-schema@1.4.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":152985},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"bun":">=1.4.0 <2","node":">=24 <25"},"exports":{".":{"bun":"./src/index.ts","types":"./dist/index.d.ts","import":"./dist/index.js"},"./schema/*":"./schemas/*","./agent-plugins":{"bun":"./src/agent-plugins.ts","types":"./dist/agent-plugins.d.ts","import":"./dist/agent-plugins.js"}},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:1cb706f5-2f3e-4fcf-8bbf-0ee9907c9c50"}},"repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"_npmVersion":"11.19.0","description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","directories":{},"_nodeVersion":"24.21.0","dependencies":{"zod":"^4.6.5"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"devDependencies":{},"peerDependencies":{},"_npmOperationalInternal":{"tmp":"tmp/catalog-schema_1.4.1_1790369810823_0.3874522834185876","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Legacy split package superseded by the consolidated @adea-ai/plugins v2 distribution; use @adea-ai/plugins for new releases."}},"time":{"created":"2026-09-07T17:39:29.533Z","modified":"2026-09-26T23:36:18.799Z","1.1.3":"2026-09-07T17:39:29.857Z","1.1.4":"2026-09-07T17:54:59.575Z","1.2.0":"2026-09-08T17:39:11.622Z","1.3.0":"2026-09-09T18:50:45.989Z","1.4.0":"2026-09-24T20:27:48.219Z","1.4.1":"2026-09-25T20:56:50.902Z"},"bugs":{"url":"https://github.com/adea-ai/plugins/issues"},"license":"Apache-2.0","homepage":"https://github.com/adea-ai/plugins#readme","keywords":["agents","catalog","marketplace","mcp","plugins","schema","skills","zod"],"repository":{"url":"git+https://github.com/adea-ai/plugins.git","type":"git","directory":"packages/catalog-schema"},"description":"Deterministic catalog schema for AI agent plugin marketplaces: plugins, capabilities, releases, provenance, licensing, security classification, and per-harness compatibility.","maintainers":[{"name":"0xplayerone","email":"andrew.mahoney.f@gmail.com"}],"readme":"# @adea-ai/catalog-schema\n\nDeterministic, provenance-first schemas for AI agent plugin marketplaces.\nOne Zod schema (plus JSON Schemas for non-TypeScript consumers) describing\nplugin catalogs across harnesses: **Codex, Claude Code, Cursor, Pi, Hermes,\nOpenCode**, and generic skill/MCP targets.\n\nThe schema is a metadata and provenance boundary. It describes what a plugin\nis, where it came from, and how it maps onto harnesses — it never installs or\nexecutes anything.\n\n## What's inside\n\n- **Catalog schemas** — plugins, releases, capabilities (`skill`,\n  `mcp-server`, `connector`, `command`, `agent`, `hook`, `rule`, and more),\n  categories, and sources.\n- **Provenance** — source lock entries with SHA-pinned Git trees, sha256\n  content digests, license metadata, and security classifications.\n- **Harness compatibility** — per-harness status (`native`, `portable`,\n  `requires-translation`, `blocked-by-policy`, …) and materialization plans.\n- **JSON Schemas** — language-agnostic validation artifacts\n  (`catalog.v1`, `compatibility.v1`, `sources-lock.v1`).\n\n## Install\n\n```sh\nbun add @adea-ai/catalog-schema\n```\n\n## Usage\n\n```ts\nimport { CatalogSchema, PluginSchema, HarnessSchema } from '@adea-ai/catalog-schema'\n\nconst catalog = CatalogSchema.parse(rawCatalog)\n```\n\nJSON Schemas are available as files for non-TypeScript consumers:\n\n```ts\nimport catalogSchema from '@adea-ai/catalog-schema/schema/catalog.v1.schema.json' with { type: 'json' }\n```\n\n## Design rules\n\n- Digests are `sha256:<64 hex>`; Git SHAs are 40-char hex; timestamps carry an\n  explicit offset.\n- Harness identifiers are a closed enum; unknown harnesses fail validation\n  rather than passing silently.\n- Every plugin release carries provenance: repository, commit, and content\n  digests.\n\n## License\n\nApache-2.0\n","readmeFilename":"README.md"}