@frontmcp/adapters 1.1.2 → 1.2.0

package/skills/bundle/overlay-parser.d.ts

@@ -0,0 +1,42 @@
+import { type ParsedBundle } from './bundle.schema';
+import type { ResolvedBundle } from './bundle.types';
+/**
+ * Pragmatic overlay-parser for v1.2.
+ *
+ * The wire format is an OpenAPI Overlay (OAI 1.0/1.1) whose `info.x-frontmcp-bundle`
+ * extension carries the fully resolved bundle metadata produced by the SaaS
+ * analyzer. The plugin DOES NOT walk overlay JSONPath updates against the spec
+ * itself — the SaaS has already done all OpenAPI resolution and emits a flat,
+ * validated bundle object. The plugin simply:
+ *
+ *   1. Parses the overlay YAML/JSON
+ *   2. Extracts `info.x-frontmcp-bundle`
+ *   3. Validates structure with Zod (defense-in-depth)
+ *   4. Cross-validates references (serviceId / authBindingRef / operationId)
+ *
+ * This intentionally avoids re-implementing OpenAPI spec parsing in-tree. A
+ * future v1.3 may add a build-time mode that consumes raw OpenAPI + Overlay
+ * directly when SaaS isn't in the loop.
+ */
+export type OverlayInput = {
+    kind: 'yaml';
+    content: string;
+} | {
+    kind: 'json';
+    content: string;
+} | {
+    kind: 'object';
+    content: unknown;
+};
+export declare class OverlayParseError extends Error {
+    readonly errors?: string[] | undefined;
+    constructor(message: string, errors?: string[] | undefined);
+}
+/**
+ * Parse and validate an overlay into a ResolvedBundle. Throws OverlayParseError
+ * on any structural or cross-reference violation.
+ */
+export declare function parseOverlay(input: OverlayInput): ResolvedBundle;
+/** Re-export for tests that want raw schema output. */
+export type { ParsedBundle };
+//# sourceMappingURL=overlay-parser.d.ts.map

package/skills/bundle/overlay-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"overlay-parser.d.ts","sourceRoot":"","sources":["../../../src/skills/bundle/overlay-parser.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAIzC,qBAAa,iBAAkB,SAAQ,KAAK;aAGxB,MAAM,CAAC,EAAE,MAAM,EAAE;gBADjC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAA;CAKpC;AA6CD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAqBhE;AAED,uDAAuD;AACvD,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/skills/dependency/skill-dag.d.ts

@@ -0,0 +1,39 @@
+import type { BundledSkill } from '../bundle/bundle.types';
+/**
+ * Thrown when the `requires` graph contains a cycle. `cycle` lists the ids
+ * forming the offending chain (first id appears once at the end too, so the
+ * loop is visible at a glance).
+ */
+export declare class SkillDependencyCycleError extends Error {
+    readonly cycle: string[];
+    constructor(cycle: string[]);
+}
+/**
+ * Thrown when a skill declares `requires: [otherId]` but `otherId` is not
+ * present in the bundle.
+ */
+export declare class SkillDependencyMissingError extends Error {
+    readonly skillId: string;
+    readonly missingId: string;
+    constructor(skillId: string, missingId: string);
+}
+/**
+ * Thrown when an internal invariant of the resolver is violated (e.g. the
+ * `ready` queue and `byId` map disagree). Surfaces as a typed error rather
+ * than a generic Error so callers can distinguish "bug in the resolver"
+ * from "bad input".
+ */
+export declare class SkillDependencyInvariantError extends Error {
+    constructor(message: string);
+}
+/**
+ * Compute the dependency-respecting load order for a list of skills.
+ *
+ * Returns a fresh array — input is not mutated. Tie-break is alphabetical by
+ * id so the order is deterministic across runs (helps tests + audit logs).
+ *
+ * Throws `SkillDependencyMissingError` for unknown ids and
+ * `SkillDependencyCycleError` for cycles.
+ */
+export declare function resolveSkillLoadOrder(skills: BundledSkill[]): BundledSkill[];
+//# sourceMappingURL=skill-dag.d.ts.map

package/skills/dependency/skill-dag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-dag.d.ts","sourceRoot":"","sources":["../../../src/skills/dependency/skill-dag.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;GAIG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;aACtB,KAAK,EAAE,MAAM,EAAE;gBAAf,KAAK,EAAE,MAAM,EAAE;CAI5C;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM;gBADjB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM;CAKpC;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CA4E5E"}

package/skills/index.d.ts

@@ -0,0 +1,17 @@
+export type { AuthBinding, AuthoritiesPolicy, BundleIntegrity, BundledSkill, HttpMethod, OperationDescriptor, ResolvedBundle, ServiceDescriptor, } from './bundle/bundle.types';
+export { bundleSkillToActions } from './bundle/bundle.types';
+export { crossValidate, resolvedBundleSchema, type ParsedBundle } from './bundle/bundle.schema';
+export { OverlayParseError, parseOverlay, type OverlayInput } from './bundle/overlay-parser';
+export { BundleStore, BundlePinnedError, type BundleStoreCounter, type BundleStoreOptions, type BundleStoreSpan, type BundleStoreTelemetry, type BundleSwapListener, } from './bundle/bundle.store';
+export { diffBundles, formatDiffSummary, type BundleDiff } from './bundle/bundle-diff';
+export { resolveSkillLoadOrder, SkillDependencyCycleError, SkillDependencyInvariantError, SkillDependencyMissingError, } from './dependency/skill-dag';
+export { bundleSourceSchema, npmSourceSchema, saasSourceSchema, signatureKeySchema, staticSourceSchema, type BundleSourceOptions, type NpmSourceOptions, type SaasSourceOptions, type SignatureKey, type StaticSourceOptions, } from './source-options';
+export { createBundleSource, NpmSource, SaasPullSource, StaticSource } from './sources';
+export type { BundleSourceListener, SkillBundleSource } from './sources/skill-bundle-source.interface';
+export { FilesystemSkillsSource, loadFilesystemSkill, parseSkillFrontmatter, type FilesystemSkillContent, type FilesystemSkillsEvent, type FilesystemSkillsListener, type FilesystemSkillsLogger, type FilesystemSkillsSourceOptions, } from './sources/filesystem-skills.source';
+export { bundleDigest, canonicalize, verifyBundleSignature, type SignatureVerifyCounter, type SignatureVerifyResult, type SignatureVerifyTelemetry, } from './security/bundle-signature';
+export { BundlePushJwtVerifier, type BundlePushJwtVerifierOptions } from './security/jwt-verifier';
+export { WebhookReplayGuard, type ReplayCheckResult, type ReplayGuardCounter, type ReplayGuardTelemetry, type WebhookReplayGuardOptions, } from './security/webhook-replay-guard';
+export { canonicalizeRecordForSigning, defaultAuditSignatureVerifier, Hs256AuditSigner, linkRecord, MemoryAuditStore, nextPrevHash, Rs256AuditSigner, SKILL_AUDIT_ERROR_MESSAGE_MAX, SKILL_AUDIT_GENESIS_PREV_HASH, SKILL_AUDIT_KEYS, SKILL_AUDIT_QUEUE_MAX, SkillAuditWriter, SkillAuditWriterToken, StorageAdapterAuditStore, verifyChain, type AuditChainVerifyResult, type AuditSignatureVerifier, type AuditTrustedKey, type SkillAuditAuthorityFailExtras, type SkillAuditConfig, type SkillAuditFailureExtras, type SkillAuditLogger, type SkillAuditMetrics, type SkillAuditPartialRecord, type SkillAuditPhase, type SkillAuditReadOptions, type SkillAuditRecord, type SkillAuditSignatureAlg, type SkillAuditSigner, type SkillAuditSignResult, type SkillAuditSubjectMode, type SkillAuditWriterOptions, type SkillAuditStore, type SkillAuditSuccessExtras, type SkillAuditWriteContext, } from './audit';
+export { hasSkillAuditFactory, setSkillAuditFactory } from '@frontmcp/sdk';
+//# sourceMappingURL=index.d.ts.map

package/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAQA,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvF,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACxF,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAIvG,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,SAAS,CAAC;AAMjB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}