Module manifests (glixo.module.json)

The manifest is the contract between your module and Glixo Code, Agxos, and the marketplace. Validate before every publish.

Required fields

The validator requires exactly these (see manifest-reference.md):

• id — stable reverse-DNS identifier
• name — display name
• version — semver
• protocolVersion — catalog protocol channel (currently 0)
• runtime — runtime.kind is required, e.g. { "kind": "node", "version": "20" }
• entry — launch command; entry.command is required, e.g. { "command": "node", "args": ["index.js"] }. Client-bundled apps use the declarative marker { "command": "echo", "args": ["client-bundled-in-app"] }.
• capabilities[] — at least one capability the module provides (namespaced id). Capabilities it uses go in requires as capability.<id>.

Common optional fields

• description — shown in the marketplace
• kind — authoring hint only: module, service, extension, app, or theme. Not required; the runtime role is derived from components, requires, capabilities, and contributions.
• artifacts[] — versioned zip(s), each with rid, url, sha256. Needed in practice to install; the validator checks each entry's fields when present.
• requires — platform features / capabilities the module depends on
• icon, images[] — marketplace presentation
• changelog.entries[] — version history shown on the detail page
• components[] — runnable cells and placement
• contributes — UI, tools, skills, Agxos apps (see Extension types)
• config.fields[] — user-editable settings schema
• health — health-check path for long-running server components
• updateChannels — e.g. ["stable"]
• sourceRepository — public HTTPS git URL (required for marketplace-listed Agxos apps; see below)
• license — SPDX id and optional source attribution URL

sourceRepository (marketplace policy)

Agxos apps listed on the public marketplace must declare where their source lives so users can audit, fork, and report issues.

"sourceRepository": {
  "url": "https://github.com/you/my-agxos-app",
  "directory": "."
}

Status: documented policy for Agxos marketplace listings. The validate API does not reject missing sourceRepository yet — add it now so you are ready when enforcement lands. Code extensions and bundled browse-only providers may omit it until their listing policy is finalized.

The marketplace detail page will link “View source” to this URL. Fork workflows (App Creator, Agxos “Fork app…”) can clone from it when the app is not in the community monorepo.

Example (trimmed)

{
  "id": "glixo.samples.memory-inspector",
  "name": "Memory Inspector",
  "kind": "extension",
  "version": "0.1.0",
  "protocolVersion": "0",
  "runtime": { "kind": "node", "version": "20" },
  "entry": { "command": "echo", "args": ["client-bundled-in-app"] },
  "capabilities": ["glixo.samples.memory-inspector"],
  "contributes": {
    "sidebarViews": [{ "id": "…", "slot": "session.sidebar", "title": "Agent Memory", "component": "AgentMemoryPanel" }],
    "tools": [{ "id": "…", "name": "list_saved_memory", "description": "…", "inputSchema": { "type": "object" } }]
  },
  "artifacts": [{ "rid": "any", "url": "artifacts/….zip", "sha256": "…" }]
}

Schema and reference

• module.schema.json — JSON Schema
• manifest-reference.md — field-by-field reference