{ "id": "ustar-bundle-compose", "name": "Reproducible portable USTAR bundle composer", "description": "WHEN TO USE: Package 1–32 supplied named UTF-8 or binary artifacts into exact reproducible regular-file USTAR bytes, canonical Base64, SHA-256 and a sorted source-index/offset manifest. Restricted portable ASCII relative paths, fixed nonexecutable metadata, no compression, archive extraction, filesystem reads/writes or universal safe-extraction claim.", "category": "structured", "priceUsd": "0.005", "pricingStatus": "proposed-unverified", "pricing": { "unit": "one successful operation call", "proposedNominalUsd": "0.005", "sixDecimalTokenBaseUnits": "5000", "subscription": false, "includesPayerWalletOrNetworkFees": false, "liveQuoteVerified": false, "condition": "Actual SDK challenge is authoritative only within the caller's explicit authorization; configured six-decimal token peg is an operator assertion, not a conversion guarantee." }, "intents": [ "Package supplied named artifacts as an exact reproducible tar archive", "Create a byte-addressed bundle with content hashes and source indexes" ], "whenToUse": [ "Package supplied named artifacts as an exact reproducible tar archive", "Create a byte-addressed bundle with content hashes and source indexes" ], "whenNotToUse": [ "ZIP, gzip, compression, directories, links, devices, executable modes, permissions or ownership preservation", "Reading paths, extracting archives, PAX/GNU extensions or universal cross-platform extraction safety", "Sending, uploading, extracting archives, writing files, authenticating identities, or changing external state" ], "capabilities": [ "Profile portable-regular-ustar-v1; ASCII-byte path ordering with case-insensitive collision rejection", "Fixed 0644 regular files; zero uid/gid/mtime, empty owner names; exact two-block terminator", "SHA-256 over decoded bytes; sidecar manifest is not an archive member", "Deterministic supplied-input-only artifact; zero external requests and no current-time dependence" ], "limits": { "inputBytes": 100000, "outputBytes": 400000, "jsonNodes": 12000, "depth": 20, "profile": "portable-regular-ustar-v1", "files": 32, "pathBytes": 100, "segmentBytes": 64, "payloadBytes": 60000, "archiveBytes": 93696, "extraction": "never performed; consumers still require safe extraction" }, "related": [ "oci-artifact-compose", "multipart-form-encode", "content-digest" ], "errorCodes": [ "INPUT_LIMIT", "OUTPUT_LIMIT", "COMPLEXITY_LIMIT", "INVALID_JSON", "INVALID_NUMBER", "INVALID_UNICODE", "UNSAFE_KEY", "INVALID_PATH", "DUPLICATE_PATH", "PATH_COLLISION", "INVALID_BASE64", "PAYLOAD_LIMIT", "ARCHIVE_LIMIT" ], "requirementsProfile": { "format": "declared-requirements-v1", "facts": { "execution.suppliedCode": false, "execution.remoteMutation": false, "execution.llmInference": false, "execution.paidMcp": false, "verification.semanticTruth": false, "verification.sourceAuthenticity": false, "verification.liveVulnerabilities": false, "numbers.arbitraryPrecisionJson": false, "numbers.model": "ieee754-binary64", "privacy.requestBodyPersisted": false, "execution.deterministic": true, "execution.networkAccess": false, "privacy.resultBodyPersisted": false, "payment.x402": true, "payment.mpp": true, "operation.id": "ustar-bundle-compose", "operation.category": "structured", "limit.httpRequestBytes": 131072, "limit.requestBytes": 100000, "limit.responseBytes": 524288, "limit.resultBytes": 400000, "limit.jsonDepth": 20, "limit.jsonNodes": 12000, "ustar.profile": "portable-regular-ustar-v1", "ustar.maxFiles": 32, "ustar.maxPayloadBytes": 60000, "ustar.maxArchiveBytes": 93696, "ustar.maxPathAsciiBytes": 100, "ustar.order": "ascii-path-bytes", "ustar.metadata": "mode0644-uid0-gid0-mtime0", "ustar.regularFilesOnly": true, "ustar.compression": false, "ustar.filesystemAccess": false, "ustar.extractionPerformed": false, "ustar.universalExtractionSafetyCertified": false, "input.files.maxItems": 32, "input.files.minItems": 1 }, "unknownPolicy": "Undeclared requirements are unknown, never compatible. Matching declared facts does not establish semantic fit or input validity.", "preflight": "/preflight" }, "documentation": "/reference/tools/ustar-bundle-compose.md", "serviceContract": "/reference/services/ustar-bundle-compose.json", "errors": [ { "status": 400, "meaning": "Malformed JSON, missing/invalid idempotency key, or payment identifier mismatch", "retry": "Correct the request before payment" }, { "status": 402, "meaning": "Payment challenge or rejected payment", "retry": "Use official protocol SDK; inspect payment outcome before another payment" }, { "status": 409, "meaning": "Idempotency conflict, duplicate proof, or PAYMENT_UNCERTAIN", "retry": "Keep original key, body, and proof; reconcile uncertainty with operator; never blindly repay" }, { "status": 413, "meaning": "Input or generated output too large", "retry": "Reduce input; no payment attempted for validation failure" }, { "status": 415, "meaning": "Unsupported media type or compression", "retry": "Send uncompressed application/json" }, { "status": 422, "meaning": "Schema or service-specific semantic validation failure", "retry": "Correct input using returned error code; no payment attempted" }, { "status": 429, "meaning": "Request/payment-attempt rate exceeded", "retry": "Wait for rate limit window; preserve existing payment identity" }, { "status": 503, "meaning": "Payment configuration/provider/state unavailable, or live DNS preparation failed before settlement", "retry": "Check readiness; DNS preparation failures may retry the identical key/body/credential only; uncertainty requires reconciliation" } ], "numericPrecision": "JavaScript IEEE-754 numbers; use strings for large integer IDs/exact decimals where the schema accepts strings. No lossless numeric parsing.", "paymentWorkflow": { "discoveryOnly": false, "supportedProtocols": [ "x402", "mpp" ], "x402": { "credentialHeader": "PAYMENT-SIGNATURE", "challengeHeader": "PAYMENT-REQUIRED", "receiptHeader": "PAYMENT-RESPONSE", "version": 2, "scheme": "exact", "paymentIdentifier": "payment-identifier extension MUST equal the HTTP Idempotency-Key", "sdk": "@x402/core with @x402/evm" }, "mpp": { "supported": true, "credentialHeader": "Authorization", "challengeHeader": "WWW-Authenticate", "receiptHeader": "Payment-Receipt", "method": "tempo", "intent": "charge", "sdk": "mppx", "tokenDecimals": 6 }, "steps": [ "Check configured readiness and the exact service schema", "Generate a fresh random Idempotency-Key for this operation; never use a discovery probe fixture for purchases", "Send valid input without a credential to obtain the official protocol challenge", "Use the official SDK and authorized wallet to fulfill the challenge", "Retry only with identical key, body, protocol and credential", "On PAYMENT_UNCERTAIN stop and request operator reconciliation; never blindly pay again" ], "versionedRetries": "Request fingerprint includes service release version. Retries across a version upgrade can conflict; coordinate upgrades outside the 24-hour replay window and reconcile pending attempts.", "docs": "/llms.txt" }, "method": "POST", "paths": { "x402": "/v1/x402/ustar-bundle-compose", "mpp": "/v1/mpp/ustar-bundle-compose" }, "inputSchema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "type": "object", "properties": { "files": { "minItems": 1, "maxItems": 32, "type": "array", "items": { "type": "object", "properties": { "path": { "type": "string", "minLength": 1, "maxLength": 100 }, "encoding": { "type": "string", "enum": [ "utf8", "base64" ] }, "data": { "type": "string", "maxLength": 80000 } }, "required": [ "path", "encoding", "data" ], "additionalProperties": false } } }, "required": [ "files" ], "additionalProperties": false }, "outputSchema": { "type": "object", "required": [ "operation", "version", "result", "provenance" ], "properties": { "operation": { "const": "ustar-bundle-compose", "type": "string" }, "version": { "const": "0.29.0", "type": "string" }, "result": { "$schema": "https://json-schema.org/draft/2020-12/schema", "type": "object", "properties": { "encoding": { "type": "string", "const": "base64" }, "archive": { "type": "string", "maxLength": 124928 }, "byteLength": { "type": "integer", "minimum": 1536, "maximum": 93696 }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "manifest": { "minItems": 1, "maxItems": 32, "type": "array", "items": { "type": "object", "properties": { "inputIndex": { "type": "integer", "minimum": 0, "maximum": 31 }, "path": { "type": "string", "minLength": 1, "maxLength": 100 }, "byteLength": { "type": "integer", "minimum": 0, "maximum": 60000 }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "headerOffset": { "type": "integer", "minimum": 0, "maximum": 92160 }, "dataOffset": { "type": "integer", "minimum": 512, "maximum": 92672 } }, "required": [ "inputIndex", "path", "byteLength", "sha256", "headerOffset", "dataOffset" ], "additionalProperties": false } } }, "required": [ "encoding", "archive", "byteLength", "sha256", "manifest" ], "additionalProperties": false }, "provenance": { "type": "object", "required": [ "inputSha256", "outputSha256", "deterministic", "externalRequests" ], "properties": { "inputSha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "outputSha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "deterministic": { "const": true }, "externalRequests": { "const": 0 } } } }, "additionalProperties": false }, "exampleInput": { "files": [ { "path": "a.txt", "encoding": "utf8", "data": "hi\n" } ] }, "exampleResponse": { "operation": "ustar-bundle-compose", "version": "0.29.0", "result": { "encoding": "base64", "archive": "YS50eHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwMDA2NDQAMDAwMDAwMAAwMDAwMDAwADAwMDAwMDAwMDAzADAwMDAwMDAwMDAwADAwNjcxNwAgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1c3RhcgAwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoaQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=", "byteLength": 2048, "sha256": "8909eea3aedf7c1309a054eed68c58f7506ca7e9fcb198beb7e89b408912d827", "manifest": [ { "inputIndex": 0, "path": "a.txt", "byteLength": 3, "sha256": "98ea6e4f216f2fb4b69fff9b3a44842c38686ca685f3f55dc48c5d3fb1107be4", "headerOffset": 0, "dataOffset": 512 } ] }, "provenance": { "inputSha256": "466d72e01f0ff4307aa75b44e6b6878bb3d1a57ccf05469a06d81e78042cef93", "outputSha256": "88111b382c61bb554da6987a518ee9bb429f99606ebcfa5e4c95f9f97953c921", "deterministic": true, "externalRequests": 0 } }, "requiredHeaders": { "Content-Type": "application/json", "Idempotency-Key": "random 16–128 character operation identifier" }, "fixedExample": "/reference/examples/ustar-bundle-compose.json", "execution": { "deterministic": true, "externalRequests": 0, "maxExternalRequests": 0, "resultSnapshotPersisted": false, "fixedExampleIsIllustrativeSnapshot": false, "requiresPayment": true, "supportsMcpExecution": false }, "releaseSnapshot": { "format": "static-release-reference-v1", "sourceVersion": "0.29.0", "sourceRegistrySha256": "a2b5ec09bf6c38b9d2879d746a4fded374f5928b445377b0270ef6aa8e6cac65", "generatedAt": "2026-10-06T15:38:00Z", "releaseAcceptance": "not-verified-by-generator", "runtimeReadiness": "not-evaluated", "livePaymentsVerified": false, "indexingVerified": false, "apiOrigin": null, "notice": "Build-time release reference. Runtime readiness, deployment, payment settlement and external indexing are not evaluated here. Prices are proposed; this file cannot authorize execution or payment." } }