@frontmcp/adapters 1.9.4 → 1.9.6

package/README.md

@@ -58,6 +58,6 @@ Apache-2.0 — see [LICENSE](../../LICENSE).
 
 <!-- links -->
 
-[docs-overview]: https://docs.agentfront.dev/frontmcp/adapters/overview
-[docs-openapi]: https://docs.agentfront.dev/frontmcp/adapters/openapi-adapter
-[docs-guide]: https://docs.agentfront.dev/frontmcp/guides/add-openapi-adapter
+[docs-overview]: https://frontmcp.dev/reference/sdk/adapter
+[docs-openapi]: https://frontmcp.dev/reference/adapters/openapi
+[docs-guide]: https://frontmcp.dev/learn/wrapping-an-openapi-service

package/esm/index.mjs

@@ -880,6 +880,21 @@ function appendCookie(headers, name, value) {
   const combined = existing ? `${existing}; ${cookiePair}` : cookiePair;
   headers.set("Cookie", combined);
 }
+var DOT_SEGMENTS = /* @__PURE__ */ new Set([".", ".."]);
+function assertPathStaysOnOperation(tool2, apiBaseUrl, resolvedPath, url) {
+  const templatePath = tool2.metadata.path;
+  const templateSegments = templatePath.split("/");
+  const addsDotSegment = resolvedPath.split("/").some((segment, index) => DOT_SEGMENTS.has(segment) && segment !== templateSegments[index]);
+  const literalPrefix = templatePath.split("{")[0] ?? "";
+  const expectedPathPrefix = new URL(`${apiBaseUrl}${literalPrefix}`).pathname;
+  if (addsDotSegment || !new URL(url).pathname.startsWith(expectedPathPrefix)) {
+    throw new PublicMcpError2(
+      `The path parameters of operation '${tool2.name}' do not resolve to its path`,
+      "INVALID_PATH_PARAMETER",
+      400
+    );
+  }
+}
 function specDefault(tool2, inputKey) {
   const property = tool2.inputSchema.properties?.[inputKey];
   return typeof property === "object" ? property.default : void 0;
@@ -907,9 +922,18 @@ function buildRequest(tool2, input, security, baseUrl) {
       continue;
     }
     switch (mapper.type) {
-      case "path":
-        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(coerceToString(value, mapper.key, "path")));
+      case "path": {
+        const pathValue = coerceToString(value, mapper.key, "path");
+        if (DOT_SEGMENTS.has(pathValue)) {
+          throw new PublicMcpError2(
+            `Path parameter '${mapper.key}' of operation '${tool2.name}' cannot be '.' or '..'`,
+            "INVALID_PATH_PARAMETER",
+            400
+          );
+        }
+        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(pathValue));
         break;
+      }
       case "query":
         queryParams.set(mapper.key, coerceToString(value, mapper.key, "query"));
         break;
@@ -956,6 +980,7 @@ function buildRequest(tool2, input, security, baseUrl) {
   }
   const queryString = queryParams.toString();
   const url = `${apiBaseUrl}${path}${queryString ? `?${queryString}` : ""}`;
+  assertPathStaysOnOperation(tool2, apiBaseUrl, path, url);
   return { url, headers, body };
 }
 function applyAdditionalHeaders(headers, additionalHeaders) {

package/esm/openapi/index.mjs

@@ -880,6 +880,21 @@ function appendCookie(headers, name, value) {
   const combined = existing ? `${existing}; ${cookiePair}` : cookiePair;
   headers.set("Cookie", combined);
 }
+var DOT_SEGMENTS = /* @__PURE__ */ new Set([".", ".."]);
+function assertPathStaysOnOperation(tool2, apiBaseUrl, resolvedPath, url) {
+  const templatePath = tool2.metadata.path;
+  const templateSegments = templatePath.split("/");
+  const addsDotSegment = resolvedPath.split("/").some((segment, index) => DOT_SEGMENTS.has(segment) && segment !== templateSegments[index]);
+  const literalPrefix = templatePath.split("{")[0] ?? "";
+  const expectedPathPrefix = new URL(`${apiBaseUrl}${literalPrefix}`).pathname;
+  if (addsDotSegment || !new URL(url).pathname.startsWith(expectedPathPrefix)) {
+    throw new PublicMcpError2(
+      `The path parameters of operation '${tool2.name}' do not resolve to its path`,
+      "INVALID_PATH_PARAMETER",
+      400
+    );
+  }
+}
 function specDefault(tool2, inputKey) {
   const property = tool2.inputSchema.properties?.[inputKey];
   return typeof property === "object" ? property.default : void 0;
@@ -907,9 +922,18 @@ function buildRequest(tool2, input, security, baseUrl) {
       continue;
     }
     switch (mapper.type) {
-      case "path":
-        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(coerceToString(value, mapper.key, "path")));
+      case "path": {
+        const pathValue = coerceToString(value, mapper.key, "path");
+        if (DOT_SEGMENTS.has(pathValue)) {
+          throw new PublicMcpError2(
+            `Path parameter '${mapper.key}' of operation '${tool2.name}' cannot be '.' or '..'`,
+            "INVALID_PATH_PARAMETER",
+            400
+          );
+        }
+        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(pathValue));
         break;
+      }
       case "query":
         queryParams.set(mapper.key, coerceToString(value, mapper.key, "query"));
         break;
@@ -956,6 +980,7 @@ function buildRequest(tool2, input, security, baseUrl) {
   }
   const queryString = queryParams.toString();
   const url = `${apiBaseUrl}${path}${queryString ? `?${queryString}` : ""}`;
+  assertPathStaysOnOperation(tool2, apiBaseUrl, path, url);
   return { url, headers, body };
 }
 function applyAdditionalHeaders(headers, additionalHeaders) {

package/esm/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.9.4",
+  "version": "1.9.6",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
-  "homepage": "https://docs.agentfront.dev",
+  "homepage": "https://frontmcp.dev/reference/adapters/openapi",
   "license": "Apache-2.0",
   "keywords": [
     "mcp",
@@ -64,15 +64,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.9.4",
-    "@frontmcp/di": "1.9.4",
-    "@frontmcp/sdk": "1.9.4",
-    "@frontmcp/utils": "1.9.4",
+    "@frontmcp/auth": "1.9.6",
+    "@frontmcp/di": "1.9.6",
+    "@frontmcp/sdk": "1.9.6",
+    "@frontmcp/utils": "1.9.6",
     "js-yaml": "^4.1.0",
     "mcp-from-openapi": "2.8.0",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.4"
+    "@frontmcp/lazy-zod": "1.9.6"
   }
 }

package/esm/skills/index.mjs

@@ -20,6 +20,7 @@ function bundleSkillToActions(skill, ops) {
 // libs/adapters/src/skills/bundle/bundle.schema.ts
 import { z } from "@frontmcp/lazy-zod";
 var httpMethodSchema = z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]);
+var RFC7230_TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
 var pathTemplateRegex = /^\/[^\s?#]*$/;
 var FORBIDDEN_PATH_FRAGMENTS = ["..", "\\", "`", "$(", "${"];
 var pathTemplateSchema = z.string().min(1).max(2048).refine((v) => pathTemplateRegex.test(v), {
@@ -39,7 +40,7 @@ var authBindingSchema = z.discriminatedUnion("kind", [
   z.object({
     kind: z.literal("apiKey"),
     in: z.enum(["header", "query"]),
-    name: z.string().min(1).max(128).regex(/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/, "apiKey name must match RFC 7230 token grammar"),
+    name: z.string().min(1).max(128).regex(RFC7230_TOKEN, "apiKey name must match RFC 7230 token grammar"),
     vaultRef: z.string().min(1).max(256)
   }).strict(),
   z.object({
@@ -62,7 +63,10 @@ var parameterMapperSchema = z.object({
   explode: z.boolean().optional(),
   serialization: z.record(z.string(), z.unknown()).optional(),
   security: z.record(z.string(), z.unknown()).optional()
-}).passthrough();
+}).passthrough().refine((mapper) => mapper.type !== "header" && mapper.type !== "cookie" || RFC7230_TOKEN.test(mapper.key), {
+  message: "a header or cookie mapper key must match RFC 7230 token grammar",
+  path: ["key"]
+});
 var operationDescriptorSchema = z.object({
   operationId: z.string().min(1).max(256).regex(/^[a-zA-Z0-9_.\-:]+$/, "operationId must be alphanumeric / `-` / `_` / `.` / `:`"),
   serviceId: z.string().min(1).max(128),
@@ -1807,11 +1811,11 @@ function linkRecord(prev, partial) {
     prevHash: nextPrevHash(prev)
   };
 }
-function verifyChain(records, trustedKeys, verifier) {
+function verifyChain(records, trustedKeys, verifier, options = {}) {
   if (records.length === 0) {
     return { ok: true, verified: 0 };
   }
-  let prev;
+  let prev = options.previous;
   for (let i = 0; i < records.length; i++) {
     const rec = records[i];
     if (!rec) {
@@ -1856,12 +1860,16 @@ function verifyChain(records, trustedKeys, verifier) {
 import {
   base64urlDecode as base64urlDecode2,
   base64urlEncode,
+  hkdfSha256,
   hmacSha256,
   pemToPublicJwk as pemToPublicJwk2,
   rsaSignBase64Url,
   rsaVerifySync as rsaVerifySync2,
   timingSafeEqual
 } from "@frontmcp/utils";
+function deriveFromKeyMaterial(ikm, info, length) {
+  return hkdfSha256(ikm, new Uint8Array(0), new TextEncoder().encode(info), length);
+}
 var Hs256AuditSigner = class {
   key;
   keyId;
@@ -1909,9 +1917,13 @@ var Hs256AuditSigner = class {
   getAlg() {
     return "HS256";
   }
+  deriveKey(info, length) {
+    return deriveFromKeyMaterial(this.key, info, length);
+  }
 };
 var Rs256AuditSigner = class {
   privateJwk;
+  privateExponent;
   keyId;
   constructor(privateJwk, keyId) {
     if (!keyId) {
@@ -1927,6 +1939,7 @@ var Rs256AuditSigner = class {
       throw new Error("Rs256AuditSigner: privateJwk must include `n`, `e`, and `d` (RSA private key)");
     }
     this.privateJwk = { ...privateJwk };
+    this.privateExponent = privateJwk.d;
     this.keyId = keyId;
   }
   sign(record) {
@@ -1951,6 +1964,10 @@ var Rs256AuditSigner = class {
   getAlg() {
     return "RS256";
   }
+  /** Derived from the private exponent `d`, which only the holder of the private key has. */
+  deriveKey(info, length) {
+    return deriveFromKeyMaterial(base64urlDecode2(this.privateExponent), info, length);
+  }
 };
 var defaultAuditSignatureVerifier = ({
   alg,
@@ -2012,6 +2029,9 @@ var MemoryAuditStore = class {
     if (this.records.length === 0) return void 0;
     return this.records[this.records.length - 1];
   }
+  async releaseSequence(sequence) {
+    if (sequence === this.seq && !this.records.some((record) => record.sequence === sequence)) this.seq -= 1;
+  }
   async read(opts) {
     const from = opts?.from ?? 1;
     const limit = opts?.limit;
@@ -2036,6 +2056,11 @@ var StorageAdapterAuditStore = class {
   async nextSequence() {
     return this.adapter.incr(this.sequenceKey);
   }
+  /** DECR's result tells atomically whether the counter was still `sequence`; when it was not, INCR restores it. */
+  async releaseSequence(sequence) {
+    if (await this.adapter.get(this.recordKey(sequence)) !== null) return;
+    if (await this.adapter.decr(this.sequenceKey) !== sequence - 1) await this.adapter.incr(this.sequenceKey);
+  }
   async appendAtSequence(record) {
     const key = this.recordKey(record.sequence);
     const existing = await this.adapter.get(key);
@@ -2106,6 +2131,8 @@ function createSkillAuditMetrics(telemetry) {
 }
 var SKILL_AUDIT_ERROR_MESSAGE_MAX = 500;
 var SKILL_AUDIT_QUEUE_MAX = 1e3;
+var SUBJECT_HASH_KEY_INFO = "frontmcp:audit:subject";
+var SUBJECT_HASH_KEY_LENGTH = 32;
 var SkillAuditWriter = class {
   constructor(store, signer, logger, metrics, options = {}) {
     this.store = store;
@@ -2113,7 +2140,14 @@ var SkillAuditWriter = class {
     this.logger = logger;
     this.metrics = metrics;
     this.subjectMode = options.subjectMode ?? "hash";
-    this.subjectHashSecret = options.subjectHashSecret ?? this.deriveDefaultSubjectSecret();
+    if (this.subjectMode === "hash") {
+      this.subjectHashKey = options.subjectHashSecret ?? signer.deriveKey?.(SUBJECT_HASH_KEY_INFO, SUBJECT_HASH_KEY_LENGTH);
+      if (!this.subjectHashKey) {
+        logger.warn(
+          `[skill-audit] subjectMode 'hash' needs a key, and the signer (keyId "${signer.getKeyId()}") has no key material to derive one from, so subjects are recorded as 'redacted'. Set skillsConfig.audit.subjectHashSecret to record subject hashes.`
+        );
+      }
+    }
     this.maxQueueDepth = options.maxQueueDepth ?? SKILL_AUDIT_QUEUE_MAX;
   }
   store;
@@ -2129,7 +2163,7 @@ var SkillAuditWriter = class {
   /** Current in-flight queue depth (records awaiting the chain head lock). */
   queueDepth = 0;
   subjectMode;
-  subjectHashSecret;
+  subjectHashKey;
   maxQueueDepth;
   /**
    * Phase 2 in the tool: authority check just passed. We log the inputHash
@@ -2256,7 +2290,7 @@ var SkillAuditWriter = class {
     } catch (e) {
       this.logger.warn(`[skill-audit] failed to sign record at seq=${sequence}: ${e.message}`);
       this.metrics?.incrementWriteFailure("sign");
-      await this.tryDecrementSequence(sequence);
+      await this.releaseUnusedSequence(sequence);
       return;
     }
     try {
@@ -2265,27 +2299,14 @@ var SkillAuditWriter = class {
     } catch (e) {
       this.logger.warn(`[skill-audit] failed to append record at seq=${sequence}: ${e.message}`);
       this.metrics?.incrementWriteFailure("append");
-      await this.tryDecrementSequence(sequence);
+      await this.releaseUnusedSequence(sequence);
     }
   }
-  /**
-   * Best-effort sequence rollback. Storage adapters that support `decr` will
-   * close the gap; ones that don't are no-ops. We never throw out of this
-   * helper — a failed rollback is strictly worse than a permanent gap.
-   *
-   * Detection is duck-typed (we look at `.adapter.decr` and `.options.sequenceKey`)
-   * because the SkillAuditStore interface intentionally doesn't expose
-   * sequence-mutation methods — those are storage-specific implementation
-   * detail, and forcing every implementation to expose them would push the
-   * complexity onto every adapter even when the underlying store can't
-   * support transactional rollback.
-   */
-  async tryDecrementSequence(allocated) {
-    const storeAny = this.store;
-    if (!storeAny.adapter || typeof storeAny.adapter.decr !== "function") return;
-    const sequenceKey = storeAny.options?.sequenceKey ?? "audit:skills:sequence";
+  /** Best-effort {@link SkillAuditStore.releaseSequence}; never throws, so a failed rollback leaves the gap. */
+  async releaseUnusedSequence(allocated) {
+    if (!this.store.releaseSequence) return;
     try {
-      await storeAny.adapter.decr(sequenceKey);
+      await this.store.releaseSequence(allocated);
       this.logger.debug?.(`[skill-audit] rolled back unused sequence ${allocated}`);
     } catch {
     }
@@ -2293,28 +2314,11 @@ var SkillAuditWriter = class {
   /** Apply the configured subject-mode redaction. */
   applySubjectMode(subject) {
     if (this.subjectMode === "plain") return subject;
-    if (this.subjectMode === "omit") return "redacted";
-    const mac = hmacSha2562(this.subjectHashSecret, new TextEncoder().encode(subject));
+    if (this.subjectMode === "omit" || !this.subjectHashKey) return "redacted";
+    const mac = hmacSha2562(this.subjectHashKey, new TextEncoder().encode(subject));
     const hex = bytesToHex(mac);
     return `hashed:${hex.slice(0, 32)}`;
   }
-  /**
-   * Default subject-hash secret derivation when the host doesn't supply one.
-   * Returns a deterministic 32-byte key seeded from the signer's keyId so
-   * two SkillAuditWriter instances configured against the same signer
-   * produce stable subject hashes — useful for joining records across
-   * writer reconfigurations within the same logical deployment. NOT a
-   * cryptographic key in its own right — the host SHOULD override via
-   * constructor options for production deployments.
-   */
-  deriveDefaultSubjectSecret() {
-    const key = new Uint8Array(32);
-    const seed = new TextEncoder().encode(`frontmcp:audit:subject:${this.signer.getKeyId()}`);
-    for (let i = 0; i < key.length; i++) {
-      key[i] = seed[i % seed.length] ?? 0;
-    }
-    return key;
-  }
   /**
    * Hash arbitrary output. Falls back to a sentinel if canonicalization
    * fails (circular references, non-serializable values) — the verifier

package/index.js

@@ -909,6 +909,21 @@ function appendCookie(headers, name, value) {
   const combined = existing ? `${existing}; ${cookiePair}` : cookiePair;
   headers.set("Cookie", combined);
 }
+var DOT_SEGMENTS = /* @__PURE__ */ new Set([".", ".."]);
+function assertPathStaysOnOperation(tool2, apiBaseUrl, resolvedPath, url) {
+  const templatePath = tool2.metadata.path;
+  const templateSegments = templatePath.split("/");
+  const addsDotSegment = resolvedPath.split("/").some((segment, index) => DOT_SEGMENTS.has(segment) && segment !== templateSegments[index]);
+  const literalPrefix = templatePath.split("{")[0] ?? "";
+  const expectedPathPrefix = new URL(`${apiBaseUrl}${literalPrefix}`).pathname;
+  if (addsDotSegment || !new URL(url).pathname.startsWith(expectedPathPrefix)) {
+    throw new import_sdk3.PublicMcpError(
+      `The path parameters of operation '${tool2.name}' do not resolve to its path`,
+      "INVALID_PATH_PARAMETER",
+      400
+    );
+  }
+}
 function specDefault(tool2, inputKey) {
   const property = tool2.inputSchema.properties?.[inputKey];
   return typeof property === "object" ? property.default : void 0;
@@ -936,9 +951,18 @@ function buildRequest(tool2, input, security, baseUrl) {
       continue;
     }
     switch (mapper.type) {
-      case "path":
-        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(coerceToString(value, mapper.key, "path")));
+      case "path": {
+        const pathValue = coerceToString(value, mapper.key, "path");
+        if (DOT_SEGMENTS.has(pathValue)) {
+          throw new import_sdk3.PublicMcpError(
+            `Path parameter '${mapper.key}' of operation '${tool2.name}' cannot be '.' or '..'`,
+            "INVALID_PATH_PARAMETER",
+            400
+          );
+        }
+        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(pathValue));
         break;
+      }
       case "query":
         queryParams.set(mapper.key, coerceToString(value, mapper.key, "query"));
         break;
@@ -985,6 +1009,7 @@ function buildRequest(tool2, input, security, baseUrl) {
   }
   const queryString = queryParams.toString();
   const url = `${apiBaseUrl}${path}${queryString ? `?${queryString}` : ""}`;
+  assertPathStaysOnOperation(tool2, apiBaseUrl, path, url);
   return { url, headers, body };
 }
 function applyAdditionalHeaders(headers, additionalHeaders) {

package/openapi/index.js

@@ -909,6 +909,21 @@ function appendCookie(headers, name, value) {
   const combined = existing ? `${existing}; ${cookiePair}` : cookiePair;
   headers.set("Cookie", combined);
 }
+var DOT_SEGMENTS = /* @__PURE__ */ new Set([".", ".."]);
+function assertPathStaysOnOperation(tool2, apiBaseUrl, resolvedPath, url) {
+  const templatePath = tool2.metadata.path;
+  const templateSegments = templatePath.split("/");
+  const addsDotSegment = resolvedPath.split("/").some((segment, index) => DOT_SEGMENTS.has(segment) && segment !== templateSegments[index]);
+  const literalPrefix = templatePath.split("{")[0] ?? "";
+  const expectedPathPrefix = new URL(`${apiBaseUrl}${literalPrefix}`).pathname;
+  if (addsDotSegment || !new URL(url).pathname.startsWith(expectedPathPrefix)) {
+    throw new import_sdk3.PublicMcpError(
+      `The path parameters of operation '${tool2.name}' do not resolve to its path`,
+      "INVALID_PATH_PARAMETER",
+      400
+    );
+  }
+}
 function specDefault(tool2, inputKey) {
   const property = tool2.inputSchema.properties?.[inputKey];
   return typeof property === "object" ? property.default : void 0;
@@ -936,9 +951,18 @@ function buildRequest(tool2, input, security, baseUrl) {
       continue;
     }
     switch (mapper.type) {
-      case "path":
-        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(coerceToString(value, mapper.key, "path")));
+      case "path": {
+        const pathValue = coerceToString(value, mapper.key, "path");
+        if (DOT_SEGMENTS.has(pathValue)) {
+          throw new import_sdk3.PublicMcpError(
+            `Path parameter '${mapper.key}' of operation '${tool2.name}' cannot be '.' or '..'`,
+            "INVALID_PATH_PARAMETER",
+            400
+          );
+        }
+        path = path.replaceAll(`{${mapper.key}}`, encodeURIComponent(pathValue));
         break;
+      }
       case "query":
         queryParams.set(mapper.key, coerceToString(value, mapper.key, "query"));
         break;
@@ -985,6 +1009,7 @@ function buildRequest(tool2, input, security, baseUrl) {
   }
   const queryString = queryParams.toString();
   const url = `${apiBaseUrl}${path}${queryString ? `?${queryString}` : ""}`;
+  assertPathStaysOnOperation(tool2, apiBaseUrl, path, url);
   return { url, headers, body };
 }
 function applyAdditionalHeaders(headers, additionalHeaders) {

package/openapi/openapi.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.utils.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKzE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAsDD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAC1D,OAAO,EAAE,MAAM,GACd,aAAa,CA8Gf;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAMzG;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAKD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,EAAE,EAAE,OAAO,CAAC;IACZ,0CAA0C;IAC1C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAgEhH"}
+{"version":3,"file":"openapi.utils.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKzE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AA0ED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAC1D,OAAO,EAAE,MAAM,GACd,aAAa,CAyHf;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAMzG;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAKD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,EAAE,EAAE,OAAO,CAAC;IACZ,0CAA0C;IAC1C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAgEhH"}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.9.4",
+  "version": "1.9.6",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
-  "homepage": "https://docs.agentfront.dev",
+  "homepage": "https://frontmcp.dev/reference/adapters/openapi",
   "license": "Apache-2.0",
   "keywords": [
     "mcp",
@@ -64,15 +64,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.9.4",
-    "@frontmcp/di": "1.9.4",
-    "@frontmcp/sdk": "1.9.4",
-    "@frontmcp/utils": "1.9.4",
+    "@frontmcp/auth": "1.9.6",
+    "@frontmcp/di": "1.9.6",
+    "@frontmcp/sdk": "1.9.6",
+    "@frontmcp/utils": "1.9.6",
     "js-yaml": "^4.1.0",
     "mcp-from-openapi": "2.8.0",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.4"
+    "@frontmcp/lazy-zod": "1.9.6"
   }
 }

package/skills/audit/audit-chain.d.ts

@@ -67,6 +67,11 @@ export type SkillAuditPartialRecord = Omit<SkillAuditRecord, 'prevHash' | 'signa
  * a runtime configuration error rather than a silently-unsigned record.
  */
 export declare function linkRecord(prev: SkillAuditRecord | undefined, partial: SkillAuditPartialRecord): Omit<SkillAuditRecord, 'signature' | 'signatureKeyId' | 'signatureAlg'>;
+/** Options for {@link verifyChain}. */
+export interface AuditChainVerifyOptions {
+    /** The already-verified record just before a window read with `read({ from })`; without it the first record must be the genesis. */
+    previous?: SkillAuditRecord;
+}
 /**
  * Walk the chain in order, recomputing each prevHash and verifying each
  * signature. Returns the first break or `{ ok: true }` on a clean run.
@@ -75,7 +80,7 @@ export declare function linkRecord(prev: SkillAuditRecord | undefined, partial:
  * about ordering — records must already be sorted by `sequence` ascending.
  * Production stores sort on read; tests should pass already-sorted arrays.
  */
-export declare function verifyChain(records: ReadonlyArray<SkillAuditRecord>, trustedKeys: ReadonlyArray<AuditTrustedKey>, verifier: AuditSignatureVerifier): AuditChainVerifyResult;
+export declare function verifyChain(records: ReadonlyArray<SkillAuditRecord>, trustedKeys: ReadonlyArray<AuditTrustedKey>, verifier: AuditSignatureVerifier, options?: AuditChainVerifyOptions): AuditChainVerifyResult;
 /** Re-exports for ergonomic external import. */
 export type { SkillAuditPhase, SkillAuditRecord };
 //# sourceMappingURL=audit-chain.d.ts.map

package/skills/audit/audit-chain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-chain.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-chain.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,sBAAsB,CAAC;IAC5B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErH;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,sBAAsB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC,KAAK,OAAO,CAAC;AAEd;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAI7E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAGvE;AAED;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,gBAAgB,EAChB,UAAU,GAAG,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAC7D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,CAKzE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC,EACxC,WAAW,EAAE,aAAa,CAAC,eAAe,CAAC,EAC3C,QAAQ,EAAE,sBAAsB,GAC/B,sBAAsB,CAoDxB;AAED,gDAAgD;AAChD,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"audit-chain.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-chain.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,sBAAsB,CAAC;IAC5B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErH;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,sBAAsB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC,KAAK,OAAO,CAAC;AAEd;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAI7E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAGvE;AAED;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,gBAAgB,EAChB,UAAU,GAAG,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAC7D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAClC,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,CAKzE;AAED,uCAAuC;AACvC,MAAM,WAAW,uBAAuB;IACtC,oIAAoI;IACpI,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC,EACxC,WAAW,EAAE,aAAa,CAAC,eAAe,CAAC,EAC3C,QAAQ,EAAE,sBAAsB,EAChC,OAAO,GAAE,uBAA4B,GACpC,sBAAsB,CAoDxB;AAED,gDAAgD;AAChD,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC"}

package/skills/audit/audit-config.d.ts

@@ -67,6 +67,8 @@ export interface SkillAuditConfig {
      * without surfacing PII in the persisted log. See {@link SkillAuditSubjectMode}.
      */
     subjectMode?: SkillAuditSubjectMode;
+    /** HMAC key for `subjectMode: 'hash'` (at least 32 bytes); unset, it is derived from the signer's key material. */
+    subjectHashSecret?: string | Uint8Array;
     /**
      * Optional periodic head-anchor interval (milliseconds). When set, the
      * writer occasionally writes `{ tail: { sequence, hash, timestamp } }` to

package/skills/audit/audit-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-config.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAE1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAEpC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,CAE9B,CAAC"}
+{"version":3,"file":"audit-config.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAE1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAEpC,mHAAmH;IACnH,iBAAiB,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAExC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,CAE9B,CAAC"}

package/skills/audit/audit-signer.d.ts

@@ -21,6 +21,8 @@ export interface SkillAuditSigner {
     getKeyId(): string;
     /** Algorithm this signer uses. */
     getAlg(): SkillAuditSignatureAlg;
+    /** HKDF-SHA256 key derived from the signer's key material, never the material itself; keyless (HSM/KMS) signers leave it out. */
+    deriveKey?(info: string, length: number): Uint8Array;
 }
 /**
  * HMAC-SHA256 signer for dev / single-pod stacks. Uses a shared secret;
@@ -41,6 +43,7 @@ export declare class Hs256AuditSigner implements SkillAuditSigner {
     sign(record: Omit<SkillAuditRecord, 'signature' | 'signatureKeyId' | 'signatureAlg'>): SkillAuditSignResult;
     getKeyId(): string;
     getAlg(): SkillAuditSignatureAlg;
+    deriveKey(info: string, length: number): Uint8Array;
 }
 /**
  * RS256 signer that pairs with the bundle-signing key registry.
@@ -56,11 +59,14 @@ export declare class Hs256AuditSigner implements SkillAuditSigner {
  */
 export declare class Rs256AuditSigner implements SkillAuditSigner {
     private readonly privateJwk;
+    private readonly privateExponent;
     private readonly keyId;
     constructor(privateJwk: JsonWebKey, keyId: string);
     sign(record: Omit<SkillAuditRecord, 'signature' | 'signatureKeyId' | 'signatureAlg'>): SkillAuditSignResult;
     getKeyId(): string;
     getAlg(): SkillAuditSignatureAlg;
+    /** Derived from the private exponent `d`, which only the holder of the private key has. */
+    deriveKey(info: string, length: number): Uint8Array;
 }
 /**
  * Default verifier used by tests and stand-alone forensic tools. Production

package/skills/audit/audit-signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-signer.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-signer.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAgC,KAAK,sBAAsB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAChH,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE1F;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,sBAAsB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,GAAG,oBAAoB,CAAC;IAC5G,kEAAkE;IAClE,QAAQ,IAAI,MAAM,CAAC;IACnB,kCAAkC;IAClC,MAAM,IAAI,sBAAsB,CAAC;CAClC;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,gBAAgB;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAE/B;;;;;;OAMG;gBACS,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM;IAkBtD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,GAAG,oBAAoB;IAmB3G,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,sBAAsB;CAGjC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAiB,YAAW,gBAAgB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM;IAyBjD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,GAAG,oBAAoB;IAiB3G,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,sBAAsB;CAGjC;AAID;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,sBAmD3C,CAAC;AAEF,YAAY,EAAE,eAAe,EAAE,CAAC"}
+{"version":3,"file":"audit-signer.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-signer.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAgC,KAAK,sBAAsB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAChH,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE1F;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,sBAAsB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,GAAG,oBAAoB,CAAC;IAC5G,kEAAkE;IAClE,QAAQ,IAAI,MAAM,CAAC;IACnB,kCAAkC;IAClC,MAAM,IAAI,sBAAsB,CAAC;IACjC,iIAAiI;IACjI,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;CACtD;AAOD;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,gBAAgB;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAE/B;;;;;;OAMG;gBACS,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM;IAkBtD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,GAAG,oBAAoB;IAmB3G,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,sBAAsB;IAIhC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU;CAGpD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAiB,YAAW,gBAAgB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM;IA0BjD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,GAAG,oBAAoB;IAiB3G,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,sBAAsB;IAIhC,2FAA2F;IAC3F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU;CAGpD;AAID;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,sBAmD3C,CAAC;AAEF,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/skills/audit/audit-store.d.ts

@@ -39,6 +39,8 @@ export interface SkillAuditStore {
     tail(): Promise<SkillAuditRecord | undefined>;
     /** Read records in sequence order. Used by the verifier and by HTTP viewers. */
     read(opts?: SkillAuditReadOptions): Promise<SkillAuditRecord[]>;
+    /** Give back `sequence` only while it is the latest allocation and its record was never stored; otherwise change nothing. */
+    releaseSequence?(sequence: number): Promise<void>;
 }
 /**
  * Process-local append-only audit log. Suitable for tests, dev environments,
@@ -51,6 +53,7 @@ export declare class MemoryAuditStore implements SkillAuditStore {
     nextSequence(): Promise<number>;
     appendAtSequence(record: SkillAuditRecord): Promise<void>;
     tail(): Promise<SkillAuditRecord | undefined>;
+    releaseSequence(sequence: number): Promise<void>;
     read(opts?: SkillAuditReadOptions): Promise<SkillAuditRecord[]>;
 }
 /**
@@ -77,6 +80,8 @@ export declare class StorageAdapterAuditStore implements SkillAuditStore {
     private get sequenceKey();
     private recordKey;
     nextSequence(): Promise<number>;
+    /** DECR's result tells atomically whether the counter was still `sequence`; when it was not, INCR restores it. */
+    releaseSequence(sequence: number): Promise<void>;
     appendAtSequence(record: SkillAuditRecord): Promise<void>;
     tail(): Promise<SkillAuditRecord | undefined>;
     read(opts?: SkillAuditReadOptions): Promise<SkillAuditRecord[]>;

package/skills/audit/audit-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-store.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-store.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE/E;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D;;;;OAIG;IACH,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE9C,gFAAgF;IAChF,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACjE;AAID;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,eAAe;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,GAAG,CAAK;IAEV,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAK/B,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzD,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAK7C,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAUtE;AAID;;;;;GAKG;AACH,qBAAa,wBAAyB,YAAW,eAAe;IAE5D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB;IAGR,OAAO,KAAK,WAAW,GAEtB;IAED,OAAO,CAAC,SAAS;IAKX,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAI/B,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzD,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IA8B7C,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAwBtE"}
+{"version":3,"file":"audit-store.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-store.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE/E;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D;;;;OAIG;IACH,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE9C,gFAAgF;IAChF,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEhE,6HAA6H;IAC7H,eAAe,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAID;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,eAAe;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,GAAG,CAAK;IAEV,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAK/B,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzD,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAK7C,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAUtE;AAID;;;;;GAKG;AACH,qBAAa,wBAAyB,YAAW,eAAe;IAE5D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB;IAGR,OAAO,KAAK,WAAW,GAEtB;IAED,OAAO,CAAC,SAAS;IAKX,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAIrC,kHAAkH;IAC5G,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhD,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzD,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IA8B7C,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAwBtE"}

package/skills/audit/audit-writer.d.ts

@@ -83,14 +83,7 @@ export declare const SKILL_AUDIT_QUEUE_MAX = 1000;
 export interface SkillAuditWriterOptions {
     /** See {@link SkillAuditSubjectMode}. Default: `'hash'`. */
     subjectMode?: SkillAuditSubjectMode;
-    /**
-     * Secret used for the subject HMAC when `subjectMode: 'hash'`. Hosts
-     * SHOULD pass a stable, host-managed key (typically the same audit
-     * secret you use for HS256 signing). When omitted, a deterministic key
-     * is derived from the signer's keyId so subject hashes are stable
-     * within the process — but NOT across restarts unless the signer keyId
-     * is also stable.
-     */
+    /** HMAC key for `subjectMode: 'hash'`; unset, it is {@link SkillAuditSigner.deriveKey}'s, or subjects are `'redacted'`. */
     subjectHashSecret?: Uint8Array;
     /** See {@link SKILL_AUDIT_QUEUE_MAX}. Default: 1000. */
     maxQueueDepth?: number;
@@ -116,7 +109,7 @@ export declare class SkillAuditWriter {
     /** Current in-flight queue depth (records awaiting the chain head lock). */
     private queueDepth;
     private readonly subjectMode;
-    private readonly subjectHashSecret;
+    private readonly subjectHashKey?;
     private readonly maxQueueDepth;
     constructor(store: SkillAuditStore, signer: SkillAuditSigner, logger: SkillAuditLogger, metrics?: SkillAuditMetrics | undefined, options?: SkillAuditWriterOptions);
     /**
@@ -145,31 +138,10 @@ export declare class SkillAuditWriter {
     flush(): Promise<void>;
     private write;
     private doWrite;
-    /**
-     * Best-effort sequence rollback. Storage adapters that support `decr` will
-     * close the gap; ones that don't are no-ops. We never throw out of this
-     * helper — a failed rollback is strictly worse than a permanent gap.
-     *
-     * Detection is duck-typed (we look at `.adapter.decr` and `.options.sequenceKey`)
-     * because the SkillAuditStore interface intentionally doesn't expose
-     * sequence-mutation methods — those are storage-specific implementation
-     * detail, and forcing every implementation to expose them would push the
-     * complexity onto every adapter even when the underlying store can't
-     * support transactional rollback.
-     */
-    private tryDecrementSequence;
+    /** Best-effort {@link SkillAuditStore.releaseSequence}; never throws, so a failed rollback leaves the gap. */
+    private releaseUnusedSequence;
     /** Apply the configured subject-mode redaction. */
     private applySubjectMode;
-    /**
-     * Default subject-hash secret derivation when the host doesn't supply one.
-     * Returns a deterministic 32-byte key seeded from the signer's keyId so
-     * two SkillAuditWriter instances configured against the same signer
-     * produce stable subject hashes — useful for joining records across
-     * writer reconfigurations within the same logical deployment. NOT a
-     * cryptographic key in its own right — the host SHOULD override via
-     * constructor options for production deployments.
-     */
-    private deriveDefaultSubjectSecret;
     /**
      * Hash arbitrary output. Falls back to a sentinel if canonicalization
      * fails (circular references, non-serializable values) — the verifier

package/skills/audit/audit-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-writer.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-writer.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAA+C,MAAM,sBAAsB,CAAC;AAClH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;IACtE,gBAAgB,CAAC,CAAC,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,IAAI,CAAC;CAC1E;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG;QAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;KAAE,CAAC;CACpH;AAED,+FAA+F;AAC/F,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,GAAG,iBAAiB,CAazF;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC5C,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAgBzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAlB3B;;;;OAIG;IACH,OAAO,CAAC,aAAa,CAAoC;IAEzD,4EAA4E;IAC5E,OAAO,CAAC,UAAU,CAAK;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAa;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAGpB,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,iBAAiB,YAAA,EAC5C,OAAO,GAAE,uBAA4B;IAOvC;;;;OAIG;IACH,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;;;;;OAMG;IACH,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrG,yCAAyC;IACzC,oBAAoB,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IASjG,yCAAyC;IACzC,oBAAoB,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IASjG;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B,OAAO,CAAC,KAAK;YAqCC,OAAO;IAsGrB;;;;;;;;;;;OAWG;YACW,oBAAoB;IAelC,mDAAmD;IACnD,OAAO,CAAC,gBAAgB;IAWxB;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;IASlC;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAQhB,yDAAyD;IACzD,OAAO,CAAC,WAAW;CAoBpB;AAED,iFAAiF;AACjF,OAAO,EAAE,6BAA6B,EAAE,CAAC"}
+{"version":3,"file":"audit-writer.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/audit-writer.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAA+C,MAAM,sBAAsB,CAAC;AAClH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;IACtE,gBAAgB,CAAC,CAAC,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,IAAI,CAAC;CAC1E;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG;QAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;KAAE,CAAC;CACpH;AAED,+FAA+F;AAC/F,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,GAAG,iBAAiB,CAazF;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,6BAA6B;IAC5C,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAM1C;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,2HAA2H;IAC3H,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAgBzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAlB3B;;;;OAIG;IACH,OAAO,CAAC,aAAa,CAAoC;IAEzD,4EAA4E;IAC5E,OAAO,CAAC,UAAU,CAAK;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAa;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAGpB,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,iBAAiB,YAAA,EAC5C,OAAO,GAAE,uBAA4B;IAiBvC;;;;OAIG;IACH,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;;;;;OAMG;IACH,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrG,yCAAyC;IACzC,oBAAoB,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IASjG,yCAAyC;IACzC,oBAAoB,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IASjG;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B,OAAO,CAAC,KAAK;YAqCC,OAAO;IAsGrB,8GAA8G;YAChG,qBAAqB;IAUnC,mDAAmD;IACnD,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAQhB,yDAAyD;IACzD,OAAO,CAAC,WAAW;CAoBpB;AAED,iFAAiF;AACjF,OAAO,EAAE,6BAA6B,EAAE,CAAC"}

package/skills/audit/index.d.ts

@@ -1,5 +1,5 @@
 export { SKILL_AUDIT_GENESIS_PREV_HASH, SKILL_AUDIT_KEYS, type SkillAuditPhase, type SkillAuditRecord, type SkillAuditSignatureAlg, } from './audit-record.types';
-export { canonicalizeRecordForSigning, linkRecord, nextPrevHash, verifyChain, type AuditChainVerifyResult, type AuditSignatureVerifier, type AuditTrustedKey, type SkillAuditPartialRecord, } from './audit-chain';
+export { canonicalizeRecordForSigning, linkRecord, nextPrevHash, verifyChain, type AuditChainVerifyOptions, type AuditChainVerifyResult, type AuditSignatureVerifier, type AuditTrustedKey, type SkillAuditPartialRecord, } from './audit-chain';
 export { defaultAuditSignatureVerifier, Hs256AuditSigner, Rs256AuditSigner, type SkillAuditSignResult, type SkillAuditSigner, } from './audit-signer';
 export { MemoryAuditStore, StorageAdapterAuditStore, type SkillAuditReadOptions, type SkillAuditStore, } from './audit-store';
 export { createSkillAuditMetrics, SkillAuditWriter, SKILL_AUDIT_ERROR_MESSAGE_MAX, SKILL_AUDIT_QUEUE_MAX, type SkillAuditAuthorityFailExtras, type SkillAuditFailureExtras, type SkillAuditLogger, type SkillAuditMetrics, type SkillAuditSuccessExtras, type SkillAuditTelemetry, type SkillAuditWriteContext, type SkillAuditWriterOptions, } from './audit-writer';

package/skills/audit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,4BAA4B,EAC5B,UAAU,EACV,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,uBAAuB,GAC7B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/skills/audit/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,4BAA4B,EAC5B,UAAU,EACV,YAAY,EACZ,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,uBAAuB,GAC7B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/skills/bundle/bundle.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.schema.d.ts","sourceRoot":"","sources":["../../../src/skills/bundle/bundle.schema.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAiJvC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAwBtB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAgClG"}
+{"version":3,"file":"bundle.schema.d.ts","sourceRoot":"","sources":["../../../src/skills/bundle/bundle.schema.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAoJvC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAwBtB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAgClG"}

package/skills/index.d.ts

@@ -13,7 +13,7 @@ export { FilesystemSkillsSource, loadFilesystemSkill, parseSkillFrontmatter, typ
 export { bundleDigest, canonicalize, verifyBundleSignature, type SignatureVerifyCounter, type SignatureVerifyResult, type SignatureVerifyTelemetry, } from './security/bundle-signature';
 export { BundlePushJwtVerifier, type BundlePushJwtVerifierOptions } from './security/jwt-verifier';
 export { WebhookReplayGuard, type ReplayCheckResult, type ReplayGuardCounter, type ReplayGuardTelemetry, type WebhookReplayGuardOptions, } from './security/webhook-replay-guard';
-export { canonicalizeRecordForSigning, createSkillAuditMetrics, defaultAuditSignatureVerifier, Hs256AuditSigner, linkRecord, MemoryAuditStore, nextPrevHash, Rs256AuditSigner, SKILL_AUDIT_ERROR_MESSAGE_MAX, SKILL_AUDIT_GENESIS_PREV_HASH, SKILL_AUDIT_KEYS, SKILL_AUDIT_QUEUE_MAX, SkillAuditWriter, SkillAuditWriterToken, StorageAdapterAuditStore, verifyChain, type AuditChainVerifyResult, type AuditSignatureVerifier, type AuditTrustedKey, type SkillAuditAuthorityFailExtras, type SkillAuditConfig, type SkillAuditFailureExtras, type SkillAuditLogger, type SkillAuditMetrics, type SkillAuditPartialRecord, type SkillAuditPhase, type SkillAuditReadOptions, type SkillAuditRecord, type SkillAuditSignatureAlg, type SkillAuditSigner, type SkillAuditSignResult, type SkillAuditSubjectMode, type SkillAuditWriterOptions, type SkillAuditStore, type SkillAuditSuccessExtras, type SkillAuditTelemetry, type SkillAuditWriteContext, } from './audit';
+export { canonicalizeRecordForSigning, createSkillAuditMetrics, defaultAuditSignatureVerifier, Hs256AuditSigner, linkRecord, MemoryAuditStore, nextPrevHash, Rs256AuditSigner, SKILL_AUDIT_ERROR_MESSAGE_MAX, SKILL_AUDIT_GENESIS_PREV_HASH, SKILL_AUDIT_KEYS, SKILL_AUDIT_QUEUE_MAX, SkillAuditWriter, SkillAuditWriterToken, StorageAdapterAuditStore, verifyChain, type AuditChainVerifyOptions, type AuditChainVerifyResult, type AuditSignatureVerifier, type AuditTrustedKey, type SkillAuditAuthorityFailExtras, type SkillAuditConfig, type SkillAuditFailureExtras, type SkillAuditLogger, type SkillAuditMetrics, type SkillAuditPartialRecord, type SkillAuditPhase, type SkillAuditReadOptions, type SkillAuditRecord, type SkillAuditSignatureAlg, type SkillAuditSigner, type SkillAuditSignResult, type SkillAuditSubjectMode, type SkillAuditWriterOptions, type SkillAuditStore, type SkillAuditSuccessExtras, type SkillAuditTelemetry, type SkillAuditWriteContext, } from './audit';
 export { hasSkillAuditFactory, setSkillAuditFactory } from '@frontmcp/sdk';
 export { buildKnownOps, dedupeOpReferences, extractOpReferences, validateOpReferences, type KnownOps, type OpReference, type OpReferenceDiagnostic, type OpReferenceSyntax, type SourceLocation, } from './harvester/op-reference';
 export { applyEnvironmentOverlay, crossValidateManifest, deployManifestSchema, type DeployManifest, type DeployManifestAuth, type DeployManifestBindings, type DeployManifestClassificationRule, type DeployManifestEnvironmentOverlay, type DeployManifestRuntime, type DeployManifestSecret, type DeployManifestServer, type DeployManifestSigning, type DeployManifestSkills, } from './deploy/deploy-manifest.schema';

package/skills/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAQA,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvF,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAItG,OAAO,EACL,+BAA+B,EAC/B,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,yCAAyC,CAAC;AAIjD,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC7B,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,SAAS,CAAC;AAMjB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAK3E,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,iCAAiC,CAAC;AAKzC,OAAO,EACL,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,4BAA4B,EAC5B,WAAW,EACX,kBAAkB,EAClB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EACL,+BAA+B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,gBAAgB,GACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,KAAK,8BAA8B,EAAE,MAAM,sCAAsC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAQA,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvF,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAItG,OAAO,EACL,+BAA+B,EAC/B,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,yCAAyC,CAAC;AAIjD,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC7B,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,SAAS,CAAC;AAMjB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAK3E,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,iCAAiC,CAAC;AAKzC,OAAO,EACL,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,4BAA4B,EAC5B,WAAW,EACX,kBAAkB,EAClB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EACL,+BAA+B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,gBAAgB,GACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,KAAK,8BAA8B,EAAE,MAAM,sCAAsC,CAAC"}

package/skills/index.js

@@ -119,6 +119,7 @@ function bundleSkillToActions(skill, ops) {
 // libs/adapters/src/skills/bundle/bundle.schema.ts
 var import_lazy_zod = require("@frontmcp/lazy-zod");
 var httpMethodSchema = import_lazy_zod.z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"]);
+var RFC7230_TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
 var pathTemplateRegex = /^\/[^\s?#]*$/;
 var FORBIDDEN_PATH_FRAGMENTS = ["..", "\\", "`", "$(", "${"];
 var pathTemplateSchema = import_lazy_zod.z.string().min(1).max(2048).refine((v) => pathTemplateRegex.test(v), {
@@ -138,7 +139,7 @@ var authBindingSchema = import_lazy_zod.z.discriminatedUnion("kind", [
   import_lazy_zod.z.object({
     kind: import_lazy_zod.z.literal("apiKey"),
     in: import_lazy_zod.z.enum(["header", "query"]),
-    name: import_lazy_zod.z.string().min(1).max(128).regex(/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/, "apiKey name must match RFC 7230 token grammar"),
+    name: import_lazy_zod.z.string().min(1).max(128).regex(RFC7230_TOKEN, "apiKey name must match RFC 7230 token grammar"),
     vaultRef: import_lazy_zod.z.string().min(1).max(256)
   }).strict(),
   import_lazy_zod.z.object({
@@ -161,7 +162,10 @@ var parameterMapperSchema = import_lazy_zod.z.object({
   explode: import_lazy_zod.z.boolean().optional(),
   serialization: import_lazy_zod.z.record(import_lazy_zod.z.string(), import_lazy_zod.z.unknown()).optional(),
   security: import_lazy_zod.z.record(import_lazy_zod.z.string(), import_lazy_zod.z.unknown()).optional()
-}).passthrough();
+}).passthrough().refine((mapper) => mapper.type !== "header" && mapper.type !== "cookie" || RFC7230_TOKEN.test(mapper.key), {
+  message: "a header or cookie mapper key must match RFC 7230 token grammar",
+  path: ["key"]
+});
 var operationDescriptorSchema = import_lazy_zod.z.object({
   operationId: import_lazy_zod.z.string().min(1).max(256).regex(/^[a-zA-Z0-9_.\-:]+$/, "operationId must be alphanumeric / `-` / `_` / `.` / `:`"),
   serviceId: import_lazy_zod.z.string().min(1).max(128),
@@ -1896,11 +1900,11 @@ function linkRecord(prev, partial) {
     prevHash: nextPrevHash(prev)
   };
 }
-function verifyChain(records, trustedKeys, verifier) {
+function verifyChain(records, trustedKeys, verifier, options = {}) {
   if (records.length === 0) {
     return { ok: true, verified: 0 };
   }
-  let prev;
+  let prev = options.previous;
   for (let i = 0; i < records.length; i++) {
     const rec = records[i];
     if (!rec) {
@@ -1943,6 +1947,9 @@ function verifyChain(records, trustedKeys, verifier) {
 
 // libs/adapters/src/skills/audit/audit-signer.ts
 var import_utils7 = require("@frontmcp/utils");
+function deriveFromKeyMaterial(ikm, info, length) {
+  return (0, import_utils7.hkdfSha256)(ikm, new Uint8Array(0), new TextEncoder().encode(info), length);
+}
 var Hs256AuditSigner = class {
   key;
   keyId;
@@ -1990,9 +1997,13 @@ var Hs256AuditSigner = class {
   getAlg() {
     return "HS256";
   }
+  deriveKey(info, length) {
+    return deriveFromKeyMaterial(this.key, info, length);
+  }
 };
 var Rs256AuditSigner = class {
   privateJwk;
+  privateExponent;
   keyId;
   constructor(privateJwk, keyId) {
     if (!keyId) {
@@ -2008,6 +2019,7 @@ var Rs256AuditSigner = class {
       throw new Error("Rs256AuditSigner: privateJwk must include `n`, `e`, and `d` (RSA private key)");
     }
     this.privateJwk = { ...privateJwk };
+    this.privateExponent = privateJwk.d;
     this.keyId = keyId;
   }
   sign(record) {
@@ -2032,6 +2044,10 @@ var Rs256AuditSigner = class {
   getAlg() {
     return "RS256";
   }
+  /** Derived from the private exponent `d`, which only the holder of the private key has. */
+  deriveKey(info, length) {
+    return deriveFromKeyMaterial((0, import_utils7.base64urlDecode)(this.privateExponent), info, length);
+  }
 };
 var defaultAuditSignatureVerifier = ({
   alg,
@@ -2093,6 +2109,9 @@ var MemoryAuditStore = class {
     if (this.records.length === 0) return void 0;
     return this.records[this.records.length - 1];
   }
+  async releaseSequence(sequence) {
+    if (sequence === this.seq && !this.records.some((record) => record.sequence === sequence)) this.seq -= 1;
+  }
   async read(opts) {
     const from = opts?.from ?? 1;
     const limit = opts?.limit;
@@ -2117,6 +2136,11 @@ var StorageAdapterAuditStore = class {
   async nextSequence() {
     return this.adapter.incr(this.sequenceKey);
   }
+  /** DECR's result tells atomically whether the counter was still `sequence`; when it was not, INCR restores it. */
+  async releaseSequence(sequence) {
+    if (await this.adapter.get(this.recordKey(sequence)) !== null) return;
+    if (await this.adapter.decr(this.sequenceKey) !== sequence - 1) await this.adapter.incr(this.sequenceKey);
+  }
   async appendAtSequence(record) {
     const key = this.recordKey(record.sequence);
     const existing = await this.adapter.get(key);
@@ -2187,6 +2211,8 @@ function createSkillAuditMetrics(telemetry) {
 }
 var SKILL_AUDIT_ERROR_MESSAGE_MAX = 500;
 var SKILL_AUDIT_QUEUE_MAX = 1e3;
+var SUBJECT_HASH_KEY_INFO = "frontmcp:audit:subject";
+var SUBJECT_HASH_KEY_LENGTH = 32;
 var SkillAuditWriter = class {
   constructor(store, signer, logger, metrics, options = {}) {
     this.store = store;
@@ -2194,7 +2220,14 @@ var SkillAuditWriter = class {
     this.logger = logger;
     this.metrics = metrics;
     this.subjectMode = options.subjectMode ?? "hash";
-    this.subjectHashSecret = options.subjectHashSecret ?? this.deriveDefaultSubjectSecret();
+    if (this.subjectMode === "hash") {
+      this.subjectHashKey = options.subjectHashSecret ?? signer.deriveKey?.(SUBJECT_HASH_KEY_INFO, SUBJECT_HASH_KEY_LENGTH);
+      if (!this.subjectHashKey) {
+        logger.warn(
+          `[skill-audit] subjectMode 'hash' needs a key, and the signer (keyId "${signer.getKeyId()}") has no key material to derive one from, so subjects are recorded as 'redacted'. Set skillsConfig.audit.subjectHashSecret to record subject hashes.`
+        );
+      }
+    }
     this.maxQueueDepth = options.maxQueueDepth ?? SKILL_AUDIT_QUEUE_MAX;
   }
   store;
@@ -2210,7 +2243,7 @@ var SkillAuditWriter = class {
   /** Current in-flight queue depth (records awaiting the chain head lock). */
   queueDepth = 0;
   subjectMode;
-  subjectHashSecret;
+  subjectHashKey;
   maxQueueDepth;
   /**
    * Phase 2 in the tool: authority check just passed. We log the inputHash
@@ -2337,7 +2370,7 @@ var SkillAuditWriter = class {
     } catch (e) {
       this.logger.warn(`[skill-audit] failed to sign record at seq=${sequence}: ${e.message}`);
       this.metrics?.incrementWriteFailure("sign");
-      await this.tryDecrementSequence(sequence);
+      await this.releaseUnusedSequence(sequence);
       return;
     }
     try {
@@ -2346,27 +2379,14 @@ var SkillAuditWriter = class {
     } catch (e) {
       this.logger.warn(`[skill-audit] failed to append record at seq=${sequence}: ${e.message}`);
       this.metrics?.incrementWriteFailure("append");
-      await this.tryDecrementSequence(sequence);
+      await this.releaseUnusedSequence(sequence);
     }
   }
-  /**
-   * Best-effort sequence rollback. Storage adapters that support `decr` will
-   * close the gap; ones that don't are no-ops. We never throw out of this
-   * helper — a failed rollback is strictly worse than a permanent gap.
-   *
-   * Detection is duck-typed (we look at `.adapter.decr` and `.options.sequenceKey`)
-   * because the SkillAuditStore interface intentionally doesn't expose
-   * sequence-mutation methods — those are storage-specific implementation
-   * detail, and forcing every implementation to expose them would push the
-   * complexity onto every adapter even when the underlying store can't
-   * support transactional rollback.
-   */
-  async tryDecrementSequence(allocated) {
-    const storeAny = this.store;
-    if (!storeAny.adapter || typeof storeAny.adapter.decr !== "function") return;
-    const sequenceKey = storeAny.options?.sequenceKey ?? "audit:skills:sequence";
+  /** Best-effort {@link SkillAuditStore.releaseSequence}; never throws, so a failed rollback leaves the gap. */
+  async releaseUnusedSequence(allocated) {
+    if (!this.store.releaseSequence) return;
     try {
-      await storeAny.adapter.decr(sequenceKey);
+      await this.store.releaseSequence(allocated);
       this.logger.debug?.(`[skill-audit] rolled back unused sequence ${allocated}`);
     } catch {
     }
@@ -2374,28 +2394,11 @@ var SkillAuditWriter = class {
   /** Apply the configured subject-mode redaction. */
   applySubjectMode(subject) {
     if (this.subjectMode === "plain") return subject;
-    if (this.subjectMode === "omit") return "redacted";
-    const mac = (0, import_utils8.hmacSha256)(this.subjectHashSecret, new TextEncoder().encode(subject));
+    if (this.subjectMode === "omit" || !this.subjectHashKey) return "redacted";
+    const mac = (0, import_utils8.hmacSha256)(this.subjectHashKey, new TextEncoder().encode(subject));
     const hex = (0, import_utils8.bytesToHex)(mac);
     return `hashed:${hex.slice(0, 32)}`;
   }
-  /**
-   * Default subject-hash secret derivation when the host doesn't supply one.
-   * Returns a deterministic 32-byte key seeded from the signer's keyId so
-   * two SkillAuditWriter instances configured against the same signer
-   * produce stable subject hashes — useful for joining records across
-   * writer reconfigurations within the same logical deployment. NOT a
-   * cryptographic key in its own right — the host SHOULD override via
-   * constructor options for production deployments.
-   */
-  deriveDefaultSubjectSecret() {
-    const key = new Uint8Array(32);
-    const seed = new TextEncoder().encode(`frontmcp:audit:subject:${this.signer.getKeyId()}`);
-    for (let i = 0; i < key.length; i++) {
-      key[i] = seed[i % seed.length] ?? 0;
-    }
-    return key;
-  }
   /**
    * Hash arbitrary output. Falls back to a sentinel if canonicalization
    * fails (circular references, non-serializable values) — the verifier

package/skills/security/jwt-verifier.d.ts

@@ -22,6 +22,7 @@ export interface PushJwtVerifyResult {
     reason?: string;
     payload?: Record<string, unknown>;
 }
+/** Not wired to any route: a host serving its own push endpoint calls `verify` and refuses on `ok: false`. */
 export declare class BundlePushJwtVerifier {
     private readonly options;
     private readonly logger;

package/skills/security/jwt-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-verifier.d.ts","sourceRoot":"","sources":["../../../src/skills/security/jwt-verifier.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAA6C,MAAM,gBAAgB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAID,qBAAa,qBAAqB;IAK9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;gBAGhB,OAAO,EAAE,4BAA4B,EACrC,MAAM,EAAE,cAAc,EACvC,IAAI,CAAC,EAAE,WAAW;IAUpB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsDzD,OAAO,CAAC,UAAU;CAQnB"}
+{"version":3,"file":"jwt-verifier.d.ts","sourceRoot":"","sources":["../../../src/skills/security/jwt-verifier.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAA6C,MAAM,gBAAgB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAID,8GAA8G;AAC9G,qBAAa,qBAAqB;IAK9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;gBAGhB,OAAO,EAAE,4BAA4B,EACrC,MAAM,EAAE,cAAc,EACvC,IAAI,CAAC,EAAE,WAAW;IAUpB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsDzD,OAAO,CAAC,UAAU;CAQnB"}

package/skills/security/webhook-replay-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-replay-guard.d.ts","sourceRoot":"","sources":["../../../src/skills/security/webhook-replay-guard.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAC7D;AACD,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACvE;AAED,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAgBD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,GAAG,CAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiC;IAChE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;gBAEnD,OAAO,GAAE,yBAA8B;IAyBnD,2CAA2C;IAC3C,cAAc,CAAC,EAAE,EAAE,MAAM,MAAM,GAAG,IAAI;IAItC;;;;OAIG;IACH,KAAK,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,iBAAiB;IA0DtE,iEAAiE;IACjE,KAAK,IAAI,MAAM;IAYf,mDAAmD;IACnD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}
+{"version":3,"file":"webhook-replay-guard.d.ts","sourceRoot":"","sources":["../../../src/skills/security/webhook-replay-guard.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAC7D;AACD,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACvE;AAED,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAgBD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,GAAG,CAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiC;IAChE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;gBAEnD,OAAO,GAAE,yBAA8B;IAyBnD,2CAA2C;IAC3C,cAAc,CAAC,EAAE,EAAE,MAAM,MAAM,GAAG,IAAI;IAItC;;;;OAIG;IACH,KAAK,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,iBAAiB;IA0DtE,iEAAiE;IACjE,KAAK,IAAI,MAAM;IAYf,mDAAmD;IACnD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}