Bundle

Signed manifest (spec)

Byte-for-byte signed payload. Hash with RFC 8785 canonical JSON, verify the Ed25519 signature against the public key for kid-20260520-e5fe9257.

{
  "icon": {
    "kind": "svg",
    "path": "icon.svg"
  },
  "bundle": {
    "sha256": "c3abe378bfa25776470bde8a3ecb1b71c29ee30c9933ba41a9961c1d46e7953c",
    "sizeBytes": 1616
  },
  "routes": [
    {
      "path": "/ping",
      "method": "GET",
      "handlerExport": "pingHandler"
    }
  ],
  "actions": [
    {
      "slug": "echo",
      "tool": {
        "name": "hello_echo",
        "description": "Echo input back. Proof-of-life tool.",
        "inputSchemaJson": "{\"type\":\"object\",\"properties\":{\"message\":{\"type\":\"string\",\"description\":\"Anything.\"}},\"required\":[\"message\"],\"additionalProperties\":false}"
      },
      "label": "Echo",
      "category": "Hello",
      "description": "Echoes the input back. Proof-of-life.",
      "stepFunction": "helloEchoStep"
    }
  ],
  "runtime": {
    "minTupiflowVersion": "0.0.0"
  },
  "identity": {
    "name": "hello-plugin",
    "type": "hello-plugin",
    "version": "0.1.0",
    "publisher": "tupiflow",
    "description": "Minimal proof-of-life plugin for tupiflow-registry. Registers one tool and one route. No DB, no credentials, no capabilities."
  },
  "entrypoint": "bundle.mjs",
  "capabilities": []
}

Signature

yxJaNGWhtzhmawMNdNguT04apocUu7Og9ctiqQXab8mBBb9Y9ObPGnWYWSFnHg/9S3cUpAg98JRTHEdbBThYDA==