# AIPkg

## Docs

- [AI•Pkg Brand Guidelines](https://aipkg.org/aipkg-brand-guidelines.md): Official brand identity guidelines for AI•Pkg — colors, logo usage, typography, and visual standards.
- [For Platforms](https://aipkg.org/for-platforms.md): Integrate the AI•Pkg SDK and give your users instant access to the entire AI plugin ecosystem. No marketplace to build.
- [For Publishers](https://aipkg.org/for-publishers.md): Build your plugin for one AI platform. AI•Pkg packages it for every AI platform. Publish once, reach everywhere.
- [AI•Pkg](https://aipkg.org/index.md): The universal package registry for AI platform plugins — one package, every AI platform, verified by default.
- [AccountDeleter](https://aipkg.org/inventory/AccountDeleter.md): A background job that processes account deletion requests from a Service Bus subscription, evaluates eligibility criteria, deletes the account from the Gallery database, and sends confirmation or notification emails.
- [ArchivePackages](https://aipkg.org/inventory/ArchivePackages.md): Background job that copies newly published or edited NuGet packages from the primary packages blob storage into one or two archive (backup) storage accounts, advancing a cursor after each run.
- [Bootstrap](https://aipkg.org/inventory/Bootstrap.md): A vendored and heavily customized fork of Bootstrap 3.4.1 that compiles the NuGet Gallery's complete CSS and JS front-end assets, including a bespoke Fluent/dotnet-branded LESS theme layer.
- [Catalog](https://aipkg.org/inventory/Catalog.md): A dual-mode library that both writes the NuGet V3 package metadata catalog to Azure Blob Storage and provides cursor-driven collector infrastructure for downstream services to read and react to catalog changes.
- [Common](https://aipkg.org/inventory/Common.md): A loose source folder (no .csproj) that holds a single vendor-copied hash-combining utility shared across the NuGet Gallery src tree.
- [CopyAzureContainer](https://aipkg.org/inventory/CopyAzureContainer.md): A .NET Framework console job that backs up Azure Blob Storage containers from one storage account to another, using the Azure Storage SDK for container lifecycle management and AzCopy v10 for the actual data transfer.
- [DatabaseMigrationTools](https://aipkg.org/inventory/DatabaseMigrationTools.md): Console executable that applies Entity Framework Code First migrations to the Gallery, SupportRequest, Validation, and CatalogValidation SQL databases as a NuGet job.
- [Gallery.CredentialExpiration](https://aipkg.org/inventory/Gallery.CredentialExpiration.md): Background job that queries the Gallery database for expiring and expired API keys and sends warning email notifications to affected users via Azure Service Bus.
- [Gallery.Maintenance](https://aipkg.org/inventory/Gallery.Maintenance.md): Scheduled background job that runs a collection of maintenance tasks against the NuGet Gallery SQL database, currently focused on deleting expired API key credentials and their associated scopes.
- [GalleryTools](https://aipkg.org/inventory/GalleryTools.md): A command-line executable providing manual one-time and maintenance operations for the NuGet Gallery database and infrastructure.
- [GitHubVulnerabilities2Db](https://aipkg.org/inventory/GitHubVulnerabilities2Db.md): Background job that ingests GitHub Advisory Database security vulnerabilities into the NuGetGallery SQL database via GraphQL polling.
- [GitHubVulnerabilities2v3](https://aipkg.org/inventory/GitHubVulnerabilities2v3.md): Background job that reads GitHub Advisory Database vulnerability data via GraphQL and publishes it as NuGet V3 vulnerability JSON feeds to Azure Blob Storage.
- [Microsoft.PackageManagement.Search.Web](https://aipkg.org/inventory/Microsoft.PackageManagement.Search.Web.md): Shared ASP.NET Core host bootstrap library providing host builder, startup helpers, and exception filtering for NuGet search service web applications.
- [Ng](https://aipkg.org/inventory/Ng.md): Command-line job runner (ng.exe) that drives NuGet catalog synchronization, DNX flat-container population, icon processing, and package monitoring pipelines.
- [NuGet.Jobs.Auxiliary2AzureSearch](https://aipkg.org/inventory/NuGet.Jobs.Auxiliary2AzureSearch.md): Background job that synchronizes search auxiliary files and Azure Search index documents for downloads, owners, and verified packages.
- [NuGet.Jobs.Catalog2AzureSearch](https://aipkg.org/inventory/NuGet.Jobs.Catalog2AzureSearch.md): Background job that continuously tails the NuGet V3 catalog and propagates package events to the Azure Search search and hijack indexes.
- [NuGet.Jobs.Catalog2Registration](https://aipkg.org/inventory/NuGet.Jobs.Catalog2Registration.md): A background job that reads package publish and delete events from the NuGet V3 catalog and writes the corresponding registration blobs to Azure Blob Storage across three hive types.
- [NuGet.Jobs.Common](https://aipkg.org/inventory/NuGet.Jobs.Common.md): Shared infrastructure library that provides the job execution loop, configuration loading, secret injection, SQL connection management, and storage helpers used by all NuGet Gallery background jobs.
- [NuGet.Jobs.Db2AzureSearch](https://aipkg.org/inventory/NuGet.Jobs.Db2AzureSearch.md): One-time bootstrap job that performs a full initial population of the Azure Search indexes and auxiliary files from the Gallery database or Kusto, establishing the baseline from which incremental jobs (Catalog2AzureSearch and Auxiliary2AzureSearch) take over.
- [NuGet.Jobs.GitHubIndexer](https://aipkg.org/inventory/NuGet.Jobs.GitHubIndexer.md): Background job that discovers popular C# GitHub repositories, extracts their NuGet package dependencies, and publishes the aggregated usage data to Azure Blob Storage.
- [NuGet.Protocol.Catalog](https://aipkg.org/inventory/NuGet.Protocol.Catalog.md): A .NET library that provides typed models, an HTTP client, and a cursor-driven processor for consuming the NuGet V3 Catalog resource.
- [NuGet.Services.AzureSearch](https://aipkg.org/inventory/NuGet.Services.AzureSearch.md): Shared library that provides the logic for indexing NuGet packages into Azure AI Search and serving search queries against those indexes.
- [NuGet.Services.Build](https://aipkg.org/inventory/NuGet.Services.Build.md): A shared MSBuild task library that provides duplicate-file detection and Visual Studio installation discovery utilities to support the NuGet Gallery's code-signing and build pipelines.
- [NuGet.Services.CatalogValidation](https://aipkg.org/inventory/NuGet.Services.CatalogValidation.md): Shared library that provides the Entity Framework DbContext and EF6 migrations for the dedicated CatalogValidation SQL database, which stores package validation state separately from the main Validation database.
- [NuGet.Services.Configuration](https://aipkg.org/inventory/NuGet.Services.Configuration.md): Shared library that extends Microsoft.Extensions.Configuration with Azure Key Vault secret injection, attribute-driven configuration binding, and helper types used across NuGet Gallery services.
- [NuGet.Services.Contracts](https://aipkg.org/inventory/NuGet.Services.Contracts.md): A shared interface-only library that defines the contracts for telemetry, Service Bus messaging, and package validation used across NuGet services.
- [NuGet.Services.Cursor](https://aipkg.org/inventory/NuGet.Services.Cursor.md): Shared library providing an abstract cursor abstraction that tracks the last-processed timestamp for NuGet catalog pipeline jobs, with durable (blob-backed), in-memory, HTTP-read-only, and aggregate implementations.
- [NuGet.Services.DatabaseMigration](https://aipkg.org/inventory/NuGet.Services.DatabaseMigration.md): Core shared library that drives Entity Framework code-first database migrations for all NuGet Gallery SQL databases, including Gallery, Validation, SupportRequest, and CatalogValidation.
- [NuGet.Services.Entities](https://aipkg.org/inventory/NuGet.Services.Entities.md): Shared domain model library defining all Entity Framework entity classes, interfaces, enums, and extension methods that represent NuGet Gallery's SQL Server data schema.
- [NuGet.Services.FeatureFlags](https://aipkg.org/inventory/NuGet.Services.FeatureFlags.md): A lightweight library that provides dynamic feature toggle and targeted flight rollout capabilities, backed by a periodically refreshed in-memory cache of flag state loaded from an external storage service.
- [NuGet.Services.GitHub](https://aipkg.org/inventory/NuGet.Services.GitHub.md): Shared library that fetches NuGet-ecosystem security advisories from the GitHub Advisory Database via GraphQL and ingests them into NuGet Gallery data stores.
- [NuGet.Services.Incidents](https://aipkg.org/inventory/NuGet.Services.Incidents.md): A small client library that provides typed access to the NuGet incident API over HTTP using certificate-based authentication.
- [NuGet.Services.KeyVault](https://aipkg.org/inventory/NuGet.Services.KeyVault.md): Provides a layered abstraction for reading, writing, caching, and injecting secrets from Azure Key Vault across NuGet services.
- [NuGet.Services.Licenses](https://aipkg.org/inventory/NuGet.Services.Licenses.md): Parses and tokenizes SPDX-style license expressions into typed segments for display and linking on the NuGet Gallery web UI.
- [NuGet.Services.Logging](https://aipkg.org/inventory/NuGet.Services.Logging.md): Shared server-side logging library that wires Serilog and Application Insights together and provides NuGet-specific telemetry enrichers, initializers, and processors for all NuGet services.
- [NuGet.Services.Messaging](https://aipkg.org/inventory/NuGet.Services.Messaging.md): A shared library that defines the data contract and Service Bus enqueuing infrastructure for asynchronous email delivery across NuGet services.
- [NuGet.Services.Messaging.Email](https://aipkg.org/inventory/NuGet.Services.Messaging.Email.md): A shared library providing the abstractions, base classes, and two concrete implementations for composing and dispatching email messages across NuGet front-end and back-end services.
- [NuGet.Services.Metadata.Catalog.Monitoring](https://aipkg.org/inventory/NuGet.Services.Metadata.Catalog.Monitoring.md): Validates that package metadata in the NuGet V3 endpoints (registration, flat container, search) is consistent with the authoritative source in the gallery database and catalog.
- [NuGet.Services.Owin](https://aipkg.org/inventory/NuGet.Services.Owin.md): A small shared library that provides an OWIN middleware for enforcing HTTPS across the NuGet Gallery, with configurable port and per-path exclusions.
- [NuGet.Services.Revalidate](https://aipkg.org/inventory/NuGet.Services.Revalidate.md): A background job that retroactively enqueues previously published packages for re-signing validation, prioritizing high-impact packages while throttling throughput to avoid overloading the ingestion pipeline.
- [NuGet.Services.SearchService.Core](https://aipkg.org/inventory/NuGet.Services.SearchService.Core.md): ASP.NET Core microservice that adapts NuGet V2/V3 search protocol to Azure AI Search, serving package discovery for nuget.org and NuGet clients.
- [NuGet.Services.ServiceBus](https://aipkg.org/inventory/NuGet.Services.ServiceBus.md): Provides a typed, schema-versioned abstraction layer over Azure Service Bus for publishing and consuming messages across NuGet backend services.
- [NuGet.Services.Sql](https://aipkg.org/inventory/NuGet.Services.Sql.md): Provides Azure SQL connection factory abstractions with Entra ID (AAD) certificate-based authentication and an in-process access token cache for NuGet services.
- [NuGet.Services.Status](https://aipkg.org/inventory/NuGet.Services.Status.md): A shared contract library that defines the component tree model, status enumerations, and service status snapshot type used to represent and communicate NuGet service health.
- [NuGet.Services.Status.Table](https://aipkg.org/inventory/NuGet.Services.Status.Table.md): Azure Table Storage entity contracts for persisting NuGet service status data — incidents, events, messages, and manual overrides.
- [NuGet.Services.Storage](https://aipkg.org/inventory/NuGet.Services.Storage.md): Shared server-side storage abstraction for NuGet services — blobs, queues, leases, and local file I/O behind a uniform URI-addressed interface.
- [NuGet.Services.Testing.Entities](https://aipkg.org/inventory/NuGet.Services.Testing.Entities.md): Infrastructure library for unit testing Entity Framework 6 entity contexts using Moq — provides async-capable mock DbSet helpers and validation context setup extensions.
- [NuGet.Services.V3](https://aipkg.org/inventory/NuGet.Services.V3.md): Common infrastructure library for V3 back-end jobs — catalog commit collection, registration API client models, telemetry, and dependency injection bootstrapping.
- [NuGet.Services.Validation](https://aipkg.org/inventory/NuGet.Services.Validation.md): Shared contracts, EF entities, Service Bus messaging, and DB migrations for NuGet's asynchronous package validation pipeline.
- [NuGet.Services.Validation.Issues](https://aipkg.org/inventory/NuGet.Services.Validation.Issues.md): Strongly-typed, JSON-serializable validation issue types surfaced to users when NuGet package or symbol validation fails.
- [NuGet.Services.Validation.Orchestrator](https://aipkg.org/inventory/NuGet.Services.Validation.Orchestrator.md): Azure Service Bus-driven job that orchestrates the full validation lifecycle for NuGet packages (.nupkg) and symbol packages (.snupkg) before they become publicly available on nuget.org.
- [NuGet.SupportRequests.Notifications](https://aipkg.org/inventory/NuGet.SupportRequests.Notifications.md): Scheduled job that queries the NuGet support-request database and dispatches daily on-call and weekly summary notification emails via Azure Service Bus.
- [NuGetCDNRedirect](https://aipkg.org/inventory/NuGetCDNRedirect.md): A minimal ASP.NET MVC 5 web application that performs IIS-level HTTP redirects for CDN traffic, routing all requests to a configured destination URL with a single health-check escape hatch.
- [NuGetGallery](https://aipkg.org/inventory/NuGetGallery.md): The ASP.NET MVC 5 / Web API 2 web application that powers nuget.org — providing the package browse UI, the NuGet V2 OData feed, push/delete APIs, user and organization management, and the admin panel.
- [NuGetGallery.Core](https://aipkg.org/inventory/NuGetGallery.Core.md): Multi-targeting shared library (net472 + netstandard2.1) that provides the Gallery database context, Azure Blob Storage wrappers, file storage abstractions, core package and symbol package services, auditing infrastructure, and packaging helpers used by both the web application and out-of-process jo…
- [NuGetGallery.Services](https://aipkg.org/inventory/NuGetGallery.Services.md): Core business-logic library shared by the NuGet Gallery frontend and backend. Covers authentication, package management, user management, security policies, telemetry, configuration, and more.
- [PackageHash](https://aipkg.org/inventory/PackageHash.md): A background job that verifies every available NuGet package's SHA-512 hash against one or more blob-storage sources, recording any mismatches to a CSV file.
- [PackageLagMonitor](https://aipkg.org/inventory/PackageLagMonitor.md): A background job that measures and reports how long it takes for newly published or modified NuGet packages to become visible in the NuGet search service, emitting telemetry to Application Insights.
- [SnapshotAzureBlob](https://aipkg.org/inventory/SnapshotAzureBlob.md): A lightweight scheduled job that creates Azure Blob Storage snapshots for every blob in a given container, ensuring point-in-time recovery of critical NuGet gallery storage assets.
- [SplitLargeFiles](https://aipkg.org/inventory/SplitLargeFiles.md): Console utility that splits large text or gzip-compressed files into smaller chunks by line count, then optionally uploads the resulting files to Azure Blob Storage.
- [Stats.AggregateCdnDownloadsInGallery](https://aipkg.org/inventory/Stats.AggregateCdnDownloadsInGallery.md): Background job that reads CDN download statistics from the Synapse pipeline and writes aggregated download counts back to the Gallery SQL database.
- [Stats.AzureCdnLogs.Common](https://aipkg.org/inventory/Stats.AzureCdnLogs.Common.md): Shared library for parsing, collecting, and routing Azure CDN access logs that drive NuGet download statistics.
- [Stats.CDNLogsSanitizer](https://aipkg.org/inventory/Stats.CDNLogsSanitizer.md): A manually-run console tool that reads CDN log blobs from Azure Storage, strips or obfuscates personally identifiable information (client IP addresses), and writes the sanitized logs to a destination Azure Storage container.
- [Stats.CollectAzureChinaCDNLogs](https://aipkg.org/inventory/Stats.CollectAzureChinaCDNLogs.md): A scheduled job that collects Azure Front Door (AFD) CDN access logs from Azure China storage and transforms them into the standard NuGet stats log format, writing gzip-compressed output to a global Azure Blob destination.
- [Stats.CreateAzureCdnWarehouseReports](https://aipkg.org/inventory/Stats.CreateAzureCdnWarehouseReports.md): A scheduled job that queries the NuGet Gallery SQL database and publishes aggregated statistics reports (gallery totals) as JSON blobs to Azure Blob Storage.
- [Stats.PostProcessReports](https://aipkg.org/inventory/Stats.PostProcessReports.md): A scheduled background job that post-processes aggregated NuGet download statistics reports, splitting per-package detailed JSON blobs from a source Azure Blob Storage location into individual per-package files in a publicly accessible destination container.
- [Stats.Warehouse](https://aipkg.org/inventory/Stats.Warehouse.md): SQL Server Data Tools (SSDT) database project defining the star-schema data warehouse that stores all NuGet package and tool download telemetry.
- [StatusAggregator](https://aipkg.org/inventory/StatusAggregator.md): A scheduled job that ingests NuGet incident data, aggregates it into a structured component tree, and publishes a status.json blob consumed by the NuGet status page.
- [Validation.Common.Job](https://aipkg.org/inventory/Validation.Common.Job.md): Shared job infrastructure for all NuGet package validation workers — base classes, interfaces, storage helpers, leasing, telemetry, and Service Bus subscription processing.
- [Validation.ContentScan.Core](https://aipkg.org/inventory/Validation.ContentScan.Core.md): Shared contracts and Service Bus messaging infrastructure for the NuGet content scanning validation pipeline.
- [Validation.PackageSigning.Core](https://aipkg.org/inventory/Validation.PackageSigning.Core.md): Shared infrastructure for NuGet package signing validation — certificate blob storage, Service Bus message contracts, and cryptographic extension helpers.
- [Validation.PackageSigning.ProcessSignature](https://aipkg.org/inventory/Validation.PackageSigning.ProcessSignature.md): Queue-based Service Bus job that validates and strips cryptographic signatures on NuGet packages, operating as both a processor (before repo-signing) and a validator (after repo-signing).
- [Validation.PackageSigning.RevalidateCertificate](https://aipkg.org/inventory/Validation.PackageSigning.RevalidateCertificate.md): Scheduled job that promotes package signatures out of grace-period status and revalidates stale signing certificates via Azure Service Bus.
- [Validation.PackageSigning.ValidateCertificate](https://aipkg.org/inventory/Validation.PackageSigning.ValidateCertificate.md): Queue-driven background job that performs online X.509 certificate revocation checks for NuGet package signatures and propagates status changes to dependent package signatures.
- [Validation.ScanAndSign.Core](https://aipkg.org/inventory/Validation.ScanAndSign.Core.md): Shared contract library for dispatching NuGet package scan and repository-signing requests over Azure Service Bus.
- [Validation.Symbols](https://aipkg.org/inventory/Validation.Symbols.md): Azure WebJob that validates symbol packages (.snupkg) by verifying portable PDB integrity, checksum matching, and PE file correspondence before ingestion into NuGet.org.
- [Validation.Symbols.Core](https://aipkg.org/inventory/Validation.Symbols.Core.md): Shared contracts, message types, serializers, and entity services for the NuGet symbols package validation and ingestion pipeline.
- [VerifyGitHubVulnerabilities](https://aipkg.org/inventory/VerifyGitHubVulnerabilities.md): A monitoring job that cross-checks GitHub's NuGet security advisories against the NuGet Gallery database and V3 registration metadata, reporting any discrepancies without making mutations.
- [VerifyMicrosoftPackage](https://aipkg.org/inventory/VerifyMicrosoftPackage.md): A standalone CLI tool that validates Microsoft NuGet package metadata compliance before packages are pushed to nuget.org.
- [Overview](https://aipkg.org/inventory/index.md): A high-level map of the ~80 NuGetGallery components — grouped into core systems, shared infrastructure, and supplemental operations — with migration disposition notes for AI•Pkg.
- [Azure Search Indexes](https://aipkg.org/legacy/Azure-Search-indexes.md): Technical reference for NuGetGallery's dual Azure Search index design — the search index for package discovery and the hijack index for exact metadata lookup.
- [Deploying NuGet Gallery](https://aipkg.org/legacy/Deploying/index.md): Guide to provisioning and deploying NuGetGallery to Azure — covering SQL Database setup, Blob Storage configuration, schema migration, and publishing to Azure App Service.
- [Email Configuration](https://aipkg.org/legacy/Emails.md): Configuring email delivery for NuGetGallery — file system output for local development or SMTP for production use.
- [Frontend Development](https://aipkg.org/legacy/Frontend.md): Guide to updating NuGetGallery's frontend — compiling LESS stylesheets with Bootstrap 3 and Grunt, and adding page-specific JavaScript with jQuery and Knockout.js.
- [Search Auxiliary Files](https://aipkg.org/legacy/Search-auxiliary-files.md): Reference for the auxiliary blob storage files backing the NuGetGallery search subsystem — download counts, ownership data, verified packages, popularity transfers, and excluded packages.
- [Search Version List Resource](https://aipkg.org/legacy/Search-version-list-resource.md): Reference for the blob-backed version list resource — the per-package-ID mapping of versions and their properties used by Db2AzureSearch and Catalog2AzureSearch to determine which search index documents to update.
- [Using Azure Active Directory](https://aipkg.org/legacy/Using-AAD.md): Step-by-step guide to configuring NuGetGallery to authenticate users via Azure Active Directory — covering app registration, redirect URIs, client secrets, and Gallery web.config settings.
- [Overview](https://aipkg.org/legacy/index.md): Legacy documentation for NuGetGallery covering frontend development, deployment, email configuration, and Azure Active Directory authentication.
- [Tech Stack](https://aipkg.org/plan/01-tech-stack.md): Technology choices for runtime, API framework, ORM, authentication, storage, search, and supporting infrastructure for AI•Pkg.org.
- [Solution Structure](https://aipkg.org/plan/02-solution-structure.md): AI•Pkg.slnx project layout, directory structure, and mapping from NuGetGallery source projects to new AI•Pkg projects.
- [Data Layer](https://aipkg.org/plan/03-data-layer.md): EasyAF setup, SQL Server Database Project schema definitions, entity code generation workflow, and the schema change process.
- [Backend](https://aipkg.org/plan/04-backend.md): Authentication, storage, search index, background jobs, NuGet V3 → AI•Pkg endpoint mapping, and server-side implementation details.
- [Frontend](https://aipkg.org/plan/05-frontend.md): Blazor component architecture, Tailwind/Lucide styling setup, color palette, and what must NOT exist in AI•Pkg.Server.
- [SDK Implementation](https://aipkg.org/plan/06-sdk.md): Native AOT publish configuration, RID matrix, distribution channel setup, and TypeScript SDK strategy for the aipkg CLI.
- [Docs Portal Setup](https://aipkg.org/plan/07-docs-portal-setup.md): DotNetDocs.com setup for AI•Pkg.Core API reference, docs.aipkg.org developer portal structure, OpenAPI spec requirements, and documentation CI/CD pipeline.
- [Migration Plan](https://aipkg.org/plan/08-migration.md): Phased migration from NuGetGallery to AI•Pkg — four phases from clean solution foundation through CLI MVP, with source file mapping, deletion lists, and verification checklists.
- [Overview](https://aipkg.org/plan/index.md): How the AI•Pkg build team constructs AI•Pkg.org by transforming NuGetGallery — tech stack decisions, project structure, data layer, frontend, server, SDK, docs, and migration phases.
- [Getting Started with AI•Pkg.Docs](https://aipkg.org/quickstart.md): Get up and running with AI•Pkg.Docs in minutes
- [Package Format](https://aipkg.org/specs/01-aipkg-format.md): The `.aipkg` archive format, manifest naming convention, directory layout, file conflict resolution, size limits, and relationship to NuGet's `.nupkg`.
- [Package Naming](https://aipkg.org/specs/02-package-naming.md): Package ID syntax rules, allowed and forbidden characters, reserved IDs, publisher scoping conventions, display name vs ID, immutability, and validation error codes.
- [Versioning](https://aipkg.org/specs/03-versioning.md): SemVer 2.0.0 compliance, pre-release versions, build metadata, version normalization, dependency version ranges, version ordering, and immutability rules.
- [Prefix Reservations](https://aipkg.org/specs/04-prefix-reservations.md): Exclusive prefix ownership for verified publishers — what it is, syntax rules, how to claim a prefix, badge display, what reservation does and does not protect, and transfer/release policy.
- [Code Signing](https://aipkg.org/specs/05-code-signing.md): Normative specification for .aipkg package signing — what gets signed, the signature file format, supported signing mechanisms, trust anchors, verification algorithm, and timestamping.
- [Platform Targeting](https://aipkg.org/specs/06-platform-targeting.md): AI Platform Monikers (APMs) — the hierarchical string identifiers that describe AI platforms, their fallback resolution graph, install paths, and compatibility rules.
- [Platform Versioning](https://aipkg.org/specs/07-platform-versioning.md): How APM versioning handles breaking changes in host platforms — what counts as a breaking change, versioned moniker children, fallback behavior, deprecation policy, and publisher guidance.
- [Metadata Schema](https://aipkg.org/specs/08-metadata-schema.md): Full JSON Schema for the `.aispec` manifest file, field-by-field reference, capability and permission enums, worked examples, and validation rules.
- [Registry API](https://aipkg.org/specs/09-registry-api.md): AI•Pkg Registry API endpoint reference — service index, registration, flat container, search, autocomplete, push, platform list, and non-functional requirements.
- [SDK Interface](https://aipkg.org/specs/10-sdk-interface.md): `AI•Pkg.Core` public API types, `aipkg` CLI command syntax, and configuration file schemas — the normative interface for anyone building compatible tooling.
- [Registry UI](https://aipkg.org/specs/11-registry-ui.md): AI•Pkg Registry web UI — URL inventory, rendering requirements, performance targets, accessibility standards, and SEO requirements.
- [Package Security](https://aipkg.org/specs/12-security.md): Normative specification for AI•Pkg's multi-layer package security model — static analysis, antivirus scanning, AI-powered prompt injection detection, signature verification, and incident response.
- [AI•Pkg Specification Suite](https://aipkg.org/specs/index.md): Normative specifications for the AI•Pkg package format, platform targeting system, registry protocol, and SDK interface — everything needed to build a compatible tool or registry implementation.
- [Why AI•Pkg?](https://aipkg.org/why-aipkg.md): The problem AI•Pkg solves, the philosophy behind it, and what it explicitly does not try to be.