Five manifests at the root for the clients and crawlers that read a repository instead of a form (Claude Code plugin, Agent Plugins for cursor.directory and Cursor, Gemini CLI extension), held to the package name, the bundle description and uvx aihawk by test_publishing_surfaces. Every tool carries a title and a readOnlyHint or destructiveHint in its annotations, read over list_tools by a new test. The content gate finds tools with ast instead of a regex that stopped at the first paren. The bundle manifest gains icon and privacy_policies, the README a Privacy Policy section. 0.45.0, because the package tree moved.