Generate package.zip files that can be sold standalone or reused by solutions

Generate a Relicex relicex.pack.v0 package.zip. Include only public/licensable content. Do not include API keys, tokens, passwords, cookies, private keys, .env files, private data, or unauthorized content.

Required output:
1. manifest.json at the zip root.
2. README.md at the zip root.
3. Every file referenced by manifest.files.
4. If kind=capability_pack, include runtime, inputs_schema, outputs_schema, workflow, evaluation, and a code/main.py:run or equivalent entrypoint.

manifest.id must match ^[a-z0-9][a-z0-9_-]{2,79}$. Do not put _v1 in the id; put versions in manifest.version.
If a capability_pack reads files or emits Markdown, CSV, PDF, images, or other artifacts, use the runtime I/O convention: inputs/input.json, inputs/files/, outputs/result.json, artifacts/, logs/, and tmp/. Reference artifacts from output JSON by relative path only.
Normal capability_pack assets are review-required before publishing, not high-risk by default. Mark high risk only for real secrets, personal data, prompt-injection text, dangerous extensions, or risk_level=high.
Listing price, supply, status, subscription settings, and commercial licensing do not belong in manifest.json.
Real credentials must never be placed in the package; declare runtime environment variable names with secret_requirements only.

package.zip
├── manifest.json                 # required, at zip root
├── README.md                     # required for humans and Agents
├── docs/                         # optional supporting docs
│   └── usage.md
├── prompts/                      # optional prompt assets
│   └── system_prompt.md
├── templates/                    # optional reusable templates
│   └── report.md
├── examples/                     # recommended examples
│   ├── example_input.json
│   └── example_output.md
├── code/                         # capability_pack only, if executable
│   └── main.py
├── assets/                       # optional static assets
└── memory/                       # memory_pack only, if needed

{
  "api_version": "relicex.pack.v0",
  "kind": "experience_pack",
  "id": "api_design_playbook",
  "version": "0.1.0",
  "title": "API Design Playbook",
  "description": "A reusable workflow for designing API resources, auth, errors, and examples.",
  "author": {
    "name": "creator_or_team",
    "id": "creator_id"
  },
  "tags": ["api", "workflow", "experience"],
  "mode": "text",
  "runtime": null,
  "experience": {
    "goal": "Help an Agent design consistent API specs and implementation plans.",
    "inputs_hint": {
      "required": ["product goal", "users", "core entities"],
      "optional": ["existing API", "security constraints"]
    },
    "pitfalls": ["Mixing listing price or supply into manifest.json"],
    "recommended_params": {},
    "examples": ["examples/example_input.json"]
  },
  "files": {
    "readme": "README.md",
    "docs": ["docs/usage.md"],
    "code": [],
    "prompts": ["prompts/system_prompt.md"],
    "templates": ["templates/report.md"],
    "examples": ["examples/example_input.json", "examples/example_output.md"],
    "assets": []
  },
  "secret_requirements": [],
  "secret_groups": [],
  "runtime_permissions": {
    "network": { "required": false, "allow_domains": [] },
    "filesystem": { "writes": [] }
  },
  "redaction": {
    "enabled": true,
    "patterns": []
  }
}

{
  "secret_requirements": [
    {
      "id": "openai_api_key",
      "label": "OpenAI API Key",
      "provider": "openai",
      "type": "api_key",
      "required": true,
      "sensitive": true,
      "description": "Used only at runtime. The value is supplied by the buyer's Credential Vault.",
      "placement": [
        { "type": "env", "name": "OPENAI_API_KEY" }
      ]
    }
  ],
  "secret_groups": []
}

# From inside the package directory that contains manifest.json:
python -m json.tool manifest.json > /tmp/manifest.normalized.json
python - <<'PY'
import json, pathlib
m = json.loads(pathlib.Path('manifest.json').read_text(encoding='utf-8'))
assert m['api_version'] == 'relicex.pack.v0'
assert m['kind'] in {'memory_pack', 'experience_pack', 'capability_pack'}
assert pathlib.Path(m['files']['readme']).exists()
PY
zip -r ../package.zip manifest.json README.md docs prompts templates examples code assets memory -x '*.env' '.git/*' '__pycache__/*'