@frontmcp/plugin-skilled-openapi 1.4.0 → 1.5.0-rc.1

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@frontmcp/plugin-skilled-openapi",
-  "version": "1.4.0",
-  "description": "FrontMCP plugin: serve a customer's OpenAPI spec as skill bundles (signed, OpenAPI-Overlay-based) with hidden per-operation tools mediated by three meta-tools (search_skill / load_skill / execute_action).",
+  "version": "1.5.0-rc.1",
+  "description": "FrontMCP plugin: serve a customer's OpenAPI spec as skill bundles (signed, OpenAPI-Overlay-based) with hidden per-operation tools mediated by three meta-tools (search_skill / load_skill / run_workflow — the last runs an enclave-sandboxed AgentScript that orchestrates the loaded skills' operations).",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
+  "engines": {
+    "node": ">=24.0.0"
+  },
   "keywords": [
     "mcp",
     "frontmcp",
@@ -45,14 +48,22 @@
     }
   },
   "dependencies": {
-    "@frontmcp/adapters": "1.4.0",
-    "@frontmcp/auth": "1.4.0",
-    "@frontmcp/protocol": "1.4.0",
-    "@frontmcp/sdk": "1.4.0",
-    "@frontmcp/utils": "1.4.0"
+    "@frontmcp/adapters": "1.5.0-rc.1",
+    "@frontmcp/auth": "1.5.0-rc.1",
+    "@frontmcp/sdk": "1.5.0-rc.1"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.4.0"
+    "@enclave-vm/ast": "*",
+    "@enclave-vm/core": "*",
+    "@frontmcp/lazy-zod": "1.5.0-rc.1"
+  },
+  "peerDependenciesMeta": {
+    "@enclave-vm/ast": {
+      "optional": true
+    },
+    "@enclave-vm/core": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/registry/hidden-op.registry.d.ts

@@ -1,4 +1,4 @@
-import type { AuthBinding, OperationDescriptor, ServiceDescriptor } from '@frontmcp/adapters/skills';
+import type { AuthBinding, AuthoritiesPolicy, OperationDescriptor, ServiceDescriptor } from '@frontmcp/adapters/skills';
 /**
  * Plugin-private map of `(skillId, actionId) -> OperationDescriptor`.
  *
@@ -14,6 +14,12 @@ import type { AuthBinding, OperationDescriptor, ServiceDescriptor } from '@front
 export interface HiddenOpEntry {
     /** Skill that owns this operation (used for ABAC namespacing). */
     skillId: string;
+    /**
+     * Skill-level required-authorities policy (`BundledSkill.requiredAuthorities`),
+     * pinned with the entry. AND-ed with the op-level policy at execution time so
+     * a skill-wide gate actually protects every op of the skill (C2).
+     */
+    skillRequiredAuthorities?: AuthoritiesPolicy;
     /** Operation descriptor (immutable for the lifetime of this entry). */
     op: OperationDescriptor;
     /** Resolved service this op lives in. */
@@ -35,6 +41,14 @@ export declare class HiddenOpRegistry {
      * as a structured error to the caller.
      */
     get(skillId: string, actionId: string): HiddenOpEntry | undefined;
+    /**
+     * Resolve an operation by actionId (operationId) ALONE — used by the enclave
+     * codecall (`run_workflow`), where a sandboxed script calls
+     * `callTool(actionId, input)` without naming the owning skill. operationIds
+     * are unique within a bundle, so the first match is authoritative; returns
+     * undefined when no loaded skill exposes the action.
+     */
+    getByActionId(actionId: string): HiddenOpEntry | undefined;
     /** Set or replace the entry for `(skillId, actionId)`. */
     set(entry: HiddenOpEntry): void;
     /** Remove the entry for `(skillId, actionId)`. Returns true if anything was removed. */

package/registry/hidden-op.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hidden-op.registry.d.ts","sourceRoot":"","sources":["../../src/registry/hidden-op.registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAErG;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,EAAE,EAAE,mBAAmB,CAAC;IACxB,yCAAyC;IACzC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,+DAA+D;IAC/D,WAAW,EAAE,WAAW,CAAC;IACzB,6JAA6J;IAC7J,QAAQ,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,aAAa,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAoC;IAEnD,mEAAmE;IACnE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;OAIG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIjE,0DAA0D;IAC1D,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAI/B,wFAAwF;IACxF,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlD;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAYpC,6DAA6D;IAC7D,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC;IAIzC,6DAA6D;IAC7D,KAAK,IAAI,IAAI;CAGd"}
+{"version":3,"file":"hidden-op.registry.d.ts","sourceRoot":"","sources":["../../src/registry/hidden-op.registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,iBAAiB,CAAC;IAC7C,uEAAuE;IACvE,EAAE,EAAE,mBAAmB,CAAC;IACxB,yCAAyC;IACzC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,+DAA+D;IAC/D,WAAW,EAAE,WAAW,CAAC;IACzB,6JAA6J;IAC7J,QAAQ,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,aAAa,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAoC;IAEnD,mEAAmE;IACnE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;OAIG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIjE;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAO1D,0DAA0D;IAC1D,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAI/B,wFAAwF;IACxF,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlD;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAYpC,6DAA6D;IAC7D,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC;IAIzC,6DAA6D;IAC7D,KAAK,IAAI,IAAI;CAGd"}

package/security/authority-guard.d.ts

@@ -1,9 +1,34 @@
 import type { AuthoritiesPolicy } from '@frontmcp/adapters/skills';
 import { AuthoritiesEvaluatorRegistry, AuthoritiesProfileRegistry, type AuthoritiesResult } from '@frontmcp/auth';
 import type { FrontMcpLogger } from '@frontmcp/sdk';
+/** How an op with NO authorities policy at all is treated by {@link AuthorityGuard}. */
+export type UnprotectedOpsPolicy = 'allow' | 'deny';
 export interface AuthorityCheckArgs {
-    /** Required-authorities policy from the bundle (skill-level + op-level merged). */
+    /** Op-level required-authorities policy from the bundle (`OperationDescriptor.requiredAuthorities`). */
     policy: AuthoritiesPolicy | undefined;
+    /**
+     * Skill-level required-authorities policy (`BundledSkill.requiredAuthorities`).
+     * AND-ed with the op-level policy: BOTH must grant. Previously this was
+     * silently dropped (C2) — only op-level policy was enforced, so a bundle that
+     * gated a whole skill at the skill level left every op of that skill open.
+     */
+    skillPolicy?: AuthoritiesPolicy | undefined;
+    /**
+     * Whether the op is explicitly marked public by the bundle
+     * (`OperationDescriptor.public === true`). Only consulted when there is NO
+     * policy at all AND `unprotectedOps === 'deny'` — it is the bundle's opt-in
+     * acknowledgement that a policy-less op is intentionally callable by anyone.
+     */
+    isPublic?: boolean;
+    /**
+     * How to treat ops that carry NO policy (neither skill- nor op-level):
+     * - `'allow'` (default, backward compatible): grant — origin trust comes from
+     *   the signed bundle.
+     * - `'deny'`: default-deny the execution surface (C1/C3) — a policy-less op is
+     *   blocked unless it is explicitly `public: true`. Production deployments
+     *   should set this so a single missing policy line can't silently expose an op.
+     */
+    unprotectedOps?: UnprotectedOpsPolicy;
     /** Caller authInfo (from MCP request); shape matches libs/auth's AuthInfoLike. */
     authInfo: Partial<{
         user?: Record<string, unknown>;
@@ -15,10 +40,15 @@ export interface AuthorityCheckArgs {
     env?: Record<string, unknown>;
 }
 /**
- * Default permissive guard when no policy is attached. v1.2 ships fail-closed
- * for hidden ops: skill-level policy missing AND op-level policy missing means
- * grant — but the meta-tool layer always requires successful skill resolution
- * and the bundle signature verifies origin trust.
+ * Evaluates a hidden op's authorities. Two policies can apply — skill-level and
+ * op-level — and BOTH must grant (AND semantics). When neither is present the
+ * op is "unprotected": granted under the default `unprotectedOps: 'allow'`, or
+ * blocked under `'deny'` unless the bundle marked the op `public: true`.
+ *
+ * The signed bundle verifies origin trust; this guard is the per-op
+ * authorization boundary on the execution surface (`run_workflow` + the
+ * internal per-op tools), since `load_skill` is NOT an auth boundary on the
+ * stateless edge (no per-session loaded-skill state).
  */
 export declare class AuthorityGuard {
     private readonly engine;

package/security/authority-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority-guard.d.ts","sourceRoot":"","sources":["../../src/security/authority-guard.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAGL,4BAA4B,EAC5B,0BAA0B,EAG1B,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACvF,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;gBAGlD,IAAI,GAAE;QACJ,QAAQ,CAAC,EAAE,0BAA0B,CAAC;QACtC,UAAU,CAAC,EAAE,4BAA4B,CAAC;QAC1C,MAAM,CAAC,EAAE,cAAc,CAAC;KACpB;IASF,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAyBlE"}
+{"version":3,"file":"authority-guard.d.ts","sourceRoot":"","sources":["../../src/security/authority-guard.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAGL,4BAA4B,EAC5B,0BAA0B,EAG1B,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wFAAwF;AACxF,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,wGAAwG;IACxG,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACvF,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;gBAGlD,IAAI,GAAE;QACJ,QAAQ,CAAC,EAAE,0BAA0B,CAAC;QACtC,UAAU,CAAC,EAAE,4BAA4B,CAAC;QAC1C,MAAM,CAAC,EAAE,cAAc,CAAC;KACpB;IASF,KAAK,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAsDlE"}

package/skilled-openapi.plugin.d.ts

@@ -1,11 +1,38 @@
-import { DynamicPlugin, type ProviderType } from '@frontmcp/sdk';
+import { type BundleSourceDeps, type SkillBundleSource } from '@frontmcp/adapters/skills';
+import { DynamicPlugin, type FlowCtxOf, type ProviderType } from '@frontmcp/sdk';
 import { type SkilledOpenApiPluginOptions, type SkilledOpenApiPluginOptionsInput } from './skilled-openapi.types';
+/**
+ * Well-known DI token a host can use to inject runtime dependencies into the
+ * plugin's bundle source — without taking a hard dependency on this plugin (the
+ * host just provides a value under `Symbol.for(...)`). This is the same
+ * cross-package wiring pattern as {@link TELEMETRY_FACTORY_TOKEN}.
+ *
+ * `@frontmcp/edge` uses it to (a) swap the on-disk last-good cache for a
+ * KV-backed store and disable background polling (no filesystem / no background
+ * execution on a Worker), and (b) receive the live source so a Cron Trigger /
+ * Durable Object alarm can drive {@link SkillBundleSource.refresh}.
+ */
+export declare const SKILLED_OPENAPI_RUNTIME_DEPS_TOKEN: unique symbol;
+/**
+ * Runtime dependencies a host injects under {@link
+ * SKILLED_OPENAPI_RUNTIME_DEPS_TOKEN}. Extends the generic {@link
+ * BundleSourceDeps} (pluggable cache + `disablePolling`) with an `attach`
+ * callback that hands back the live source for external refresh scheduling.
+ */
+export interface SkilledOpenApiRuntimeDeps extends BundleSourceDeps {
+    /**
+     * Invoked once with the live bundle source right after it's constructed, so
+     * an external scheduler (Cloudflare Cron Trigger / DO alarm) can call
+     * `source.refresh()` on a runtime with no background timers.
+     */
+    attach?(source: SkillBundleSource): void;
+}
 /**
  * `@frontmcp/plugin-skilled-openapi`
  *
  * Consumes signed skill bundles (OpenAPI spec + Overlay) from a configured
  * source (static, npm, or SaaS-pull) and serves them as FrontMCP skills with
- * three meta-tools (`search_skill`, `load_skill`, `execute_action`). Per-op
+ * three meta-tools (`search_skill`, `load_skill`, `run_workflow`). Per-op
  * REST tools stay hidden from `tools/list`.
  *
  * Lifecycle: `BundleSyncService` is a useFactory provider that starts the
@@ -18,6 +45,18 @@ export default class SkilledOpenApiPlugin extends DynamicPlugin<SkilledOpenApiPl
     private cachedLogger?;
     constructor(options: SkilledOpenApiPluginOptionsInput);
     private getLogger;
+    /**
+     * Make the always-loaded `search_skill` tool description carry a live catalog
+     * of the available skills (name + short description). Because tools/list is
+     * always in the agent's context (unlike the initialize `instructions` a client
+     * may not inject), embedding the catalog here tells the agent WHEN to call
+     * `search_skill` — it can see what this server can do without searching first.
+     *
+     * Runs at every `tools:list-tools`, so the catalog reflects the currently
+     * loaded bundle (hot-swaps included). Idempotent: the description is rebuilt
+     * from the static base each time, never appended onto a prior catalog.
+     */
+    injectSkillCatalogIntoSearchTool(flowCtx: FlowCtxOf<'tools:list-tools'>): Promise<void>;
     private warnIfInsecureConfig;
     static dynamicProviders(options: SkilledOpenApiPluginOptionsInput): ProviderType[];
 }

package/skilled-openapi.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skilled-openapi.plugin.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.plugin.ts"],"names":[],"mappings":"AASA,OAAO,EACL,aAAa,EAKb,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACtC,MAAM,yBAAyB,CAAC;AAmDjC;;;;;;;;;;;;GAYG;AAQH,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,aAAa,CAC7D,2BAA2B,EAC3B,gCAAgC,CACjC;IACC,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,OAAO,EAAE,gCAAgC;IAMrD,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,oBAAoB;WAaZ,gBAAgB,CAAC,OAAO,EAAE,gCAAgC,GAAG,YAAY,EAAE;CAsI5F"}
+{"version":3,"file":"skilled-openapi.plugin.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,gBAAgB,EAIrB,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EAMb,KAAK,SAAS,EAEd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACtC,MAAM,yBAAyB,CAAC;AAmBjC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kCAAkC,eAAsD,CAAC;AAEtG;;;;;GAKG;AACH,MAAM,WAAW,yBAA0B,SAAQ,gBAAgB;IACjE;;;;OAIG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC1C;AAqDD;;;;;;;;;;;;GAYG;AAQH,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,aAAa,CAC7D,2BAA2B,EAC3B,gCAAgC,CACjC;IACC,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,OAAO,EAAE,gCAAgC;IAMrD,OAAO,CAAC,SAAS;IAOjB;;;;;;;;;;OAUG;IAEG,gCAAgC,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB7F,OAAO,CAAC,oBAAoB;WAaZ,gBAAgB,CAAC,OAAO,EAAE,gCAAgC,GAAG,YAAY,EAAE;CAsJ5F"}

package/skilled-openapi.symbols.d.ts

@@ -1,3 +1,4 @@
+import { type UnprotectedOpsPolicy } from './security/authority-guard';
 import { type CredentialResolver } from './executor/credential-resolver';
 import { type OutboundOptions, type SkilledOpenApiPluginOptions } from './skilled-openapi.types';
 /**
@@ -8,6 +9,8 @@ export declare class SkilledOpenApiConfig {
     readonly options: SkilledOpenApiPluginOptions;
     constructor(options: SkilledOpenApiPluginOptions);
     get outbound(): OutboundOptions;
+    /** Default-deny policy for ops with no required-authorities (C1/C3). */
+    get unprotectedOps(): UnprotectedOpsPolicy;
 }
 /**
  * Token for the plugin-private credential resolver. Production wiring backs

package/skilled-openapi.symbols.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skilled-openapi.symbols.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.symbols.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEjG;;;GAGG;AACH,qBAAa,oBAAoB;aACH,OAAO,EAAE,2BAA2B;gBAApC,OAAO,EAAE,2BAA2B;IAChE,IAAI,QAAQ,IAAI,eAAe,CAE9B;CACF;AAED;;;GAGG;AACH,8BAAsB,gCAAgC;IACpD,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACvF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,gCAAgC,CAExG"}
+{"version":3,"file":"skilled-openapi.symbols.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.symbols.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEjG;;;GAGG;AACH,qBAAa,oBAAoB;aACH,OAAO,EAAE,2BAA2B;gBAApC,OAAO,EAAE,2BAA2B;IAChE,IAAI,QAAQ,IAAI,eAAe,CAE9B;IACD,wEAAwE;IACxE,IAAI,cAAc,IAAI,oBAAoB,CAEzC;CACF;AAED;;;GAGG;AACH,8BAAsB,gCAAgC;IACpD,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CACvF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,gCAAgC,CAExG"}

package/skilled-openapi.types.d.ts

@@ -29,6 +29,9 @@ declare const skilledOpenApiPluginOptionsObjectSchema: import("@frontmcp/lazy-zo
         enableWebhook: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
         jwksUrl: import("@frontmcp/lazy-zod").ZodString;
         expectedIssuer: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"inline">;
+        content: import("@frontmcp/lazy-zod").ZodUnknown;
     }, import("zod/v4/core").$strip>], "type">;
     requireSignature: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
     trustedKeys: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
@@ -48,6 +51,10 @@ declare const skilledOpenApiPluginOptionsObjectSchema: import("@frontmcp/lazy-zo
         defaultMaxResponseBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
         allowHttp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
     }, import("zod/v4/core").$strip>>;
+    unprotectedOps: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
     sourceConflictPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         "static-wins": "static-wins";
         "last-wins": "last-wins";
@@ -76,6 +83,9 @@ export declare const skilledOpenApiPluginOptionsSchema: import("zod").ZodPipe<im
         enableWebhook: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
         jwksUrl: import("@frontmcp/lazy-zod").ZodString;
         expectedIssuer: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        type: import("@frontmcp/lazy-zod").ZodLiteral<"inline">;
+        content: import("@frontmcp/lazy-zod").ZodUnknown;
     }, import("zod/v4/core").$strip>], "type">;
     requireSignature: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
     trustedKeys: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
@@ -95,6 +105,10 @@ export declare const skilledOpenApiPluginOptionsSchema: import("zod").ZodPipe<im
         defaultMaxResponseBytes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
         allowHttp: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
     }, import("zod/v4/core").$strip>>;
+    unprotectedOps: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
     sourceConflictPolicy: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         "static-wins": "static-wins";
         "last-wins": "last-wins";
@@ -131,6 +145,9 @@ export declare const skilledOpenApiPluginOptionsSchema: import("zod").ZodPipe<im
         enableWebhook: boolean;
         jwksUrl: string;
         expectedIssuer: string;
+    } | {
+        type: "inline";
+        content: unknown;
     };
     requireSignature: boolean;
     trustedKeys: {
@@ -139,6 +156,7 @@ export declare const skilledOpenApiPluginOptionsSchema: import("zod").ZodPipe<im
         publicKeyPem: string;
     }[];
     dev: boolean;
+    unprotectedOps: "allow" | "deny";
     sourceConflictPolicy: "static-wins" | "last-wins" | "reject";
     exposeOperationsAsInternalTools: boolean;
     credentials?: Record<string, string> | undefined;
@@ -161,6 +179,9 @@ export declare const skilledOpenApiPluginOptionsSchema: import("zod").ZodPipe<im
         enableWebhook: boolean;
         jwksUrl: string;
         expectedIssuer: string;
+    } | {
+        type: "inline";
+        content: unknown;
     };
     requireSignature: boolean;
     trustedKeys: {
@@ -177,6 +198,7 @@ export declare const skilledOpenApiPluginOptionsSchema: import("zod").ZodPipe<im
         allowHttp: boolean;
         egressProxy?: string | undefined;
     };
+    unprotectedOps: "allow" | "deny";
     sourceConflictPolicy: "static-wins" | "last-wins" | "reject";
     exposeOperationsAsInternalTools: boolean;
     bundleCacheDir?: string | undefined;

package/skilled-openapi.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skilled-openapi.types.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.types.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAKvC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAInC,eAAO,MAAM,qBAAqB;;;;;;;iCAgC9B,CAAC;AAEL,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,QAAA,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA6D3C,CAAC;AAUH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiB5C,CAAC;AAEH,kEAAkE;AAClE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,uDAAuD;AACvD,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}
+{"version":3,"file":"skilled-openapi.types.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.types.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAKvC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAInC,eAAO,MAAM,qBAAqB;;;;;;;iCAgC9B,CAAC;AAEL,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,QAAA,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4E3C,CAAC;AAUH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiB5C,CAAC;AAEH,kEAAkE;AAClE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,uDAAuD;AACvD,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}

package/sync/bundle-sync.service.d.ts

@@ -21,7 +21,7 @@ export interface BundleSyncOptions {
      * other tools / agents / CodeCall scripts / jobs can compose with it via
      * `this.callTool(name, args)` from `ExecutionContextBase`. Internal tools
      * are excluded from `tools/list` and rejected for external `tools/call`.
-     * The existing meta-tools (`search_skill` / `load_skill` / `execute_action`)
+     * The existing meta-tools (`search_skill` / `load_skill` / `run_workflow`)
      * are unaffected.
      */
     exposeOperationsAsInternalTools: boolean;

package/sync/bundle-sync.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle-sync.service.d.ts","sourceRoot":"","sources":["../../src/sync/bundle-sync.service.ts"],"names":[],"mappings":"AAEA,OAAO,EASL,KAAK,UAAU,EACf,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEnB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,cAAc,EAAqB,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEpG,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC;;;;;;;;OAQG;IACH,+BAA+B,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAfxC,OAAO,CAAC,yBAAyB,CAA0C;gBAGxD,aAAa,EAAE,sBAAsB,EACrC,SAAS,EAAE,gBAAgB,EAC3B,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,cAAc;IACvC;;;;;;OAMG;IACc,oBAAoB,CAAC,EAAE,oBAAoB,YAAA;IAG9D;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0O/D;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;CAmCzB"}
+{"version":3,"file":"bundle-sync.service.d.ts","sourceRoot":"","sources":["../../src/sync/bundle-sync.service.ts"],"names":[],"mappings":"AAEA,OAAO,EASL,KAAK,UAAU,EACf,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEnB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,cAAc,EAAqB,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEpG,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC;;;;;;;;OAQG;IACH,+BAA+B,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAfxC,OAAO,CAAC,yBAAyB,CAA0C;gBAGxD,aAAa,EAAE,sBAAsB,EACrC,SAAS,EAAE,gBAAgB,EAC3B,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,cAAc;IACvC;;;;;;OAMG;IACc,oBAAoB,CAAC,EAAE,oBAAoB,YAAA;IAG9D;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0O/D;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;CAwCzB"}

package/tools/operation-tool.factory.d.ts

@@ -36,8 +36,8 @@ export interface OperationRegisterContext {
 }
 /**
  * Stable result envelope produced by every operation executor. Mirrors the
- * shape returned by `execute_action.tool.ts` so call-site code (via
- * `callTool`) can branch on `ok` uniformly regardless of which surface the
+ * shape returned by the shared `executeSkillAction` executor so call-site code
+ * (via `callTool`) can branch on `ok` uniformly regardless of which surface the
  * operation was reached through.
  */
 export interface OperationToolResult {
@@ -80,10 +80,11 @@ export declare class OperationToolFactory {
     /** Number of currently-registered internal operation tools (test/audit hook). */
     get size(): number;
     /**
-     * Build the actual function executor for one op. Mirrors `ExecuteActionTool.execute`:
+     * Build the actual function executor for one op. Mirrors the skill-action
+     * executor (`executeSkillAction`):
      * authority check + input validation + `executeOperation` — so callers
      * reaching the op via `callTool` get the same security gates as callers
-     * going through `execute_action`.
+     * going through `run_workflow`.
      */
     private makeExecutor;
 }

package/tools/operation-tool.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-tool.factory.d.ts","sourceRoot":"","sources":["../../src/tools/operation-tool.factory.ts"],"names":[],"mappings":"AAaA,OAAO,EAAe,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAGrB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAS/E;AA2BD,MAAM,WAAW,wBAAwB;IACvC,sEAAsE;IACtE,YAAY,EAAE,YAAY,CAAC;IAC3B,8DAA8D;IAC9D,SAAS,EAAE,gBAAgB,CAAC;IAC5B,8BAA8B;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB;;;;;;;OAOG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;CACjD;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAUD;;;GAGG;AACH,qBAAa,oBAAoB;IAMnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IALjC,kFAAkF;IAClF,OAAO,CAAC,UAAU,CAAwC;IAC1D,2EAA2E;IAC3E,OAAO,CAAC,kBAAkB,CAAqB;gBAElB,IAAI,EAAE,wBAAwB;IAE3D;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,wBAAwB,GAAG,IAAI;IA2CpE;;;;OAIG;IACH,aAAa,IAAI,IAAI;IAqBrB,iFAAiF;IACjF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;;OAKG;IACH,OAAO,CAAC,YAAY;CA4ErB"}
+{"version":3,"file":"operation-tool.factory.d.ts","sourceRoot":"","sources":["../../src/tools/operation-tool.factory.ts"],"names":[],"mappings":"AAaA,OAAO,EAAe,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAGrB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAS/E;AA2BD,MAAM,WAAW,wBAAwB;IACvC,sEAAsE;IACtE,YAAY,EAAE,YAAY,CAAC;IAC3B,8DAA8D;IAC9D,SAAS,EAAE,gBAAgB,CAAC;IAC5B,8BAA8B;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB;;;;;;;OAOG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;CACjD;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAUD;;;GAGG;AACH,qBAAa,oBAAoB;IAMnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IALjC,kFAAkF;IAClF,OAAO,CAAC,UAAU,CAAwC;IAC1D,2EAA2E;IAC3E,OAAO,CAAC,kBAAkB,CAAqB;gBAElB,IAAI,EAAE,wBAAwB;IAE3D;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,wBAAwB,GAAG,IAAI;IA2CpE;;;;OAIG;IACH,aAAa,IAAI,IAAI;IAqBrB,iFAAiF;IACjF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;CA+ErB"}

package/tools/run-workflow.schema.d.ts

@@ -0,0 +1,28 @@
+export declare const runWorkflowDescription = "Execute a task by running a short AgentScript program in a secure sandbox (enclave).\n\nThis is the EXECUTE step of the skill mechanism. After `search_skill` (to find a\nskill) and `load_skill` (to read its instructions + the actions it offers), write\na program that calls those actions to accomplish the user's task \u2014 chaining\nseveral calls in ONE round-trip, with each call authorized, schema-validated, and\nsent to the real upstream API (credentials injected from the vault, never echoed).\n\nInside the script:\n  - `await callTool(actionId, input)` invokes a loaded skill's action (the\n    `actionId` is what `load_skill` lists under `actions[]`). It returns the\n    action's response `data`, or throws if the action is unknown / unauthorized /\n    fails validation.\n  - `Math` and `JSON` are available. There is NO host access and NO network\n    except through `callTool`.\n  - The script's final `return <value>` is the result.\n\nExample (after loading a skill exposing getTodo + getUser):\n  const t = await callTool(\"getTodo\", { id: 1 });\n  const u = await callTool(\"getUser\", { id: t.userId });\n  return { todo: t.title, owner: u.name };\n\nOUTPUT: { success, value?, error?, stats }";
+export declare const runWorkflowInputSchema: {
+    script: import("@frontmcp/lazy-zod").ZodString;
+};
+export declare const runWorkflowOutputSchema: {
+    success: import("@frontmcp/lazy-zod").ZodBoolean;
+    value: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
+    error: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    stats: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        durationMs: import("@frontmcp/lazy-zod").ZodNumber;
+        toolCalls: import("@frontmcp/lazy-zod").ZodNumber;
+        steps: import("@frontmcp/lazy-zod").ZodNumber;
+    }, import("zod/v4/core").$strip>>;
+};
+export type RunWorkflowInput = {
+    script: string;
+};
+export type RunWorkflowOutput = {
+    success: boolean;
+    value?: unknown;
+    error?: string;
+    stats?: {
+        durationMs: number;
+        toolCalls: number;
+        steps: number;
+    };
+};
+//# sourceMappingURL=run-workflow.schema.d.ts.map

package/tools/run-workflow.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-workflow.schema.d.ts","sourceRoot":"","sources":["../../src/tools/run-workflow.schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,ksCAsBQ,CAAC;AAE5C,eAAO,MAAM,sBAAsB;;CAMlC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;;;;CAWnC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAClD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE,CAAC"}

package/tools/run-workflow.tool.d.ts

@@ -0,0 +1,6 @@
+import { ToolContext } from '@frontmcp/sdk';
+import { type RunWorkflowInput, type RunWorkflowOutput } from './run-workflow.schema';
+export default class RunWorkflowTool extends ToolContext {
+    execute(input: RunWorkflowInput): Promise<RunWorkflowOutput>;
+}
+//# sourceMappingURL=run-workflow.tool.d.ts.map

package/tools/run-workflow.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-workflow.tool.d.ts","sourceRoot":"","sources":["../../src/tools/run-workflow.tool.ts"],"names":[],"mappings":"AAUA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAOlD,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAkB/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAmFnE"}

package/tools/search-skill.schema.d.ts

@@ -1,8 +1,10 @@
-export declare const searchSkillDescription = "Search the available skills by free-form query.\n\nA \"skill\" is a curated bundle of REST operations exposed to you behind a single\nnamed capability \u2014 instead of seeing each individual API endpoint, you see one\nskill that knows how to do something useful (e.g. \"billing\", \"customers\"). Use\nthis tool first to discover what skills exist for the user's request, then call\n`load_skill` to read its instructions + the actions it offers, and `execute_action`\nto actually invoke one.\n\nINPUT:\n- query: short natural-language description of what you want to do\n- limit?: max results (default 20, max 50)\n- tags?: filter to skills carrying these tags\n\nOUTPUT: { skills: Array<{ skillId, name, description, score }> }";
+export declare const searchSkillDescription = "Search the available skills by free-form query.\n\nA \"skill\" is a curated bundle of REST operations exposed to you behind a single\nnamed capability \u2014 instead of seeing each individual API endpoint, you see one\nskill that knows how to do something useful (e.g. \"billing\", \"customers\"). Use\nthis tool first to discover what skills exist for the user's request, then call\n`load_skill` to read its instructions + the actions it offers, and `run_workflow`\nto execute \u2014 a short sandboxed script that calls the skill's actions via\n`callTool(actionId, input)` (chaining several in one round-trip).\n\nINPUT:\n- query: short natural-language description of what you want to do\n- limit?: max results (default 20, max 50)\n- tags?: filter to skills carrying these tags\n- notQuery?: anti-query \u2014 describe what you do NOT want; matching skills are\n  demoted (e.g. query \"rate limiting\", notQuery \"enforcement\" to prefer guidance\n  over enforcement skills)\n\nOUTPUT: { skills: Array<{ skillId, name, description, score }> }";
 export declare const searchSkillInputSchema: {
     query: import("@frontmcp/lazy-zod").ZodString;
     limit: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
     tags: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+    notQuery: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
+    notWeight: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
 };
 export declare const searchSkillOutputSchema: {
     skills: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
@@ -17,6 +19,8 @@ export type SearchSkillInput = {
     query: string;
     limit?: number;
     tags?: string[];
+    notQuery?: string | string[];
+    notWeight?: number;
 };
 export type SearchSkillOutput = {
     skills: Array<{

package/tools/search-skill.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-skill.schema.d.ts","sourceRoot":"","sources":["../../src/tools/search-skill.schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,8tBAc8B,CAAC;AAElE,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;;;CAUnC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;CACJ,CAAC"}
+{"version":3,"file":"search-skill.schema.d.ts","sourceRoot":"","sources":["../../src/tools/search-skill.schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,0hCAkB8B,CAAC;AAElE,eAAO,MAAM,sBAAsB;;;;;;CASlC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;;;CAUnC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;CACJ,CAAC"}

package/tools/search-skill.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-skill.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-skill.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAY/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA6BnE"}
+{"version":3,"file":"search-skill.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-skill.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAY/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAiCnE"}

package/tools/execute-action.schema.d.ts

@@ -1,26 +0,0 @@
-export declare const executeActionDescription = "Execute one action of a previously loaded skill.\n\nPipeline:\n  1. Resolve (skillId, actionId) \u2192 bundled OpenAPI operation\n  2. Authorize: caller's authInfo is checked against the action's required authorities (if any)\n  3. Validate: the input is validated against the action's inputJsonSchema by the underlying executor\n  4. Outbound: an HTTPS request is built and sent to the service the action belongs to,\n     with credentials injected from the configured vault (never echoed back to you)\n  5. Response: the response body is validated against outputJsonSchema and returned in\n     a structured envelope. Failures (auth, schema, network) are returned as ok:false\n     with a structured error string \u2014 they DO NOT throw.\n\nINPUT: { skillId, actionId, input }\nOUTPUT: { ok, status, data?, contentType?, error? }";
-export declare const executeActionInputSchema: {
-    skillId: import("@frontmcp/lazy-zod").ZodString;
-    actionId: import("@frontmcp/lazy-zod").ZodString;
-    input: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
-};
-export declare const executeActionOutputSchema: {
-    ok: import("@frontmcp/lazy-zod").ZodBoolean;
-    status: import("@frontmcp/lazy-zod").ZodNumber;
-    data: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnknown>;
-    contentType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
-    error: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
-};
-export type ExecuteActionInput = {
-    skillId: string;
-    actionId: string;
-    input?: Record<string, unknown>;
-};
-export type ExecuteActionOutput = {
-    ok: boolean;
-    status: number;
-    data?: unknown;
-    contentType?: string;
-    error?: string;
-};
-//# sourceMappingURL=execute-action.schema.d.ts.map

package/tools/execute-action.schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execute-action.schema.d.ts","sourceRoot":"","sources":["../../src/tools/execute-action.schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,wBAAwB,q0BAae,CAAC;AAErD,eAAO,MAAM,wBAAwB;;;;CAOpC,CAAC;AAEF,eAAO,MAAM,yBAAyB;;;;;;CAMrC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC"}

package/tools/execute-action.tool.d.ts

@@ -1,6 +0,0 @@
-import { ToolContext } from '@frontmcp/sdk';
-import { type ExecuteActionInput, type ExecuteActionOutput } from './execute-action.schema';
-export default class ExecuteActionTool extends ToolContext {
-    execute(input: ExecuteActionInput): Promise<ExecuteActionOutput>;
-}
-//# sourceMappingURL=execute-action.tool.d.ts.map

package/tools/execute-action.tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execute-action.tool.d.ts","sourceRoot":"","sources":["../../src/tools/execute-action.tool.ts"],"names":[],"mappings":"AAGA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAQlD,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,yBAAyB,CAAC;AAajC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,WAAW;IAClD,OAAO,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA4RvE"}