@frontmcp/plugin-skilled-openapi 1.4.1 → 1.5.0-rc.1

package/esm/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@frontmcp/plugin-skilled-openapi",
-  "version": "1.4.1",
-  "description": "FrontMCP plugin: serve a customer's OpenAPI spec as skill bundles (signed, OpenAPI-Overlay-based) with hidden per-operation tools mediated by three meta-tools (search_skill / load_skill / execute_action).",
+  "version": "1.5.0-rc.1",
+  "description": "FrontMCP plugin: serve a customer's OpenAPI spec as skill bundles (signed, OpenAPI-Overlay-based) with hidden per-operation tools mediated by three meta-tools (search_skill / load_skill / run_workflow — the last runs an enclave-sandboxed AgentScript that orchestrates the loaded skills' operations).",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
   "engines": {
@@ -48,14 +48,22 @@
     }
   },
   "dependencies": {
-    "@frontmcp/adapters": "1.4.1",
-    "@frontmcp/auth": "1.4.1",
-    "@frontmcp/protocol": "1.4.1",
-    "@frontmcp/sdk": "1.4.1",
-    "@frontmcp/utils": "1.4.1"
+    "@frontmcp/adapters": "1.5.0-rc.1",
+    "@frontmcp/auth": "1.5.0-rc.1",
+    "@frontmcp/sdk": "1.5.0-rc.1"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.4.1"
+    "@enclave-vm/ast": "*",
+    "@enclave-vm/core": "*",
+    "@frontmcp/lazy-zod": "1.5.0-rc.1"
+  },
+  "peerDependenciesMeta": {
+    "@enclave-vm/ast": {
+      "optional": true
+    },
+    "@enclave-vm/core": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/executor/execute-skill-action.d.ts

@@ -0,0 +1,44 @@
+import { type SkillAuditWriter } from '@frontmcp/adapters/skills';
+import type { FrontMcpLogger } from '@frontmcp/sdk';
+import { type HiddenOpEntry } from '../registry/hidden-op.registry';
+import { type AuthorityGuard, type UnprotectedOpsPolicy } from '../security/authority-guard';
+import { type OpenApiRuntimeDeps } from './openapi-runtime';
+/** Structured result envelope (the structured envelope the skill-action executor returns). */
+export interface SkillActionResult {
+    ok: boolean;
+    status: number;
+    data?: unknown;
+    contentType?: string;
+    error?: string;
+}
+/** Dependencies the shared executor needs — all resolved from DI by the caller. */
+export interface SkillActionDeps {
+    config: {
+        outbound: OpenApiRuntimeDeps['outbound'];
+        /** Default-deny policy for ops with no required-authorities (C1/C3). */
+        unprotectedOps: UnprotectedOpsPolicy;
+    };
+    resolver: {
+        resolve: OpenApiRuntimeDeps['resolver']['resolve'];
+    };
+    guard: AuthorityGuard;
+    logger: FrontMcpLogger;
+    /** Opt-in tamper-evident audit (when `skillsConfig.audit.enabled`). */
+    audit?: {
+        writer: SkillAuditWriter;
+        subject: string;
+    };
+}
+/**
+ * Execute a single resolved skill action. `entry` is the pinned operation
+ * descriptor (resolved via `HiddenOpRegistry.get`/`getByActionId`); `authInfo`
+ * is the caller's verified auth context (checked against the op's required
+ * authorities).
+ */
+export declare function executeSkillAction(args: {
+    entry: HiddenOpEntry;
+    input: Record<string, unknown>;
+    authInfo: unknown;
+    deps: SkillActionDeps;
+}): Promise<SkillActionResult>;
+//# sourceMappingURL=execute-skill-action.d.ts.map

package/executor/execute-skill-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-skill-action.d.ts","sourceRoot":"","sources":["../../src/executor/execute-skill-action.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG9E,8FAA8F;AAC9F,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE;QACN,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzC,wEAAwE;QACxE,cAAc,EAAE,oBAAoB,CAAC;KACtC,CAAC;IACF,QAAQ,EAAE;QAAE,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAA;KAAE,CAAC;IACjE,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,cAAc,CAAC;IACvB,uEAAuE;IACvE,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAWD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;CACvB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsH7B"}

package/executor/host-concurrency.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Run `fn` while holding one of at most `limit` concurrent slots for `host`.
+ * A non-positive / non-finite `limit` disables the gate (runs immediately).
+ * The slot is always released in `finally`, including when `fn` throws.
+ */
+export declare function withHostConcurrency<T>(host: string, limit: number, fn: () => Promise<T>): Promise<T>;
+/** Test-only: reset all gates. */
+export declare function __resetHostConcurrencyForTests(): void;
+//# sourceMappingURL=host-concurrency.d.ts.map

package/executor/host-concurrency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-concurrency.d.ts","sourceRoot":"","sources":["../../src/executor/host-concurrency.ts"],"names":[],"mappings":"AAuBA;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAkC1G;AAED,kCAAkC;AAClC,wBAAgB,8BAA8B,IAAI,IAAI,CAErD"}

package/executor/openapi-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi-runtime.d.ts","sourceRoot":"","sources":["../../src/executor/openapi-runtime.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AA0HD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,eAAe,CAAC,CA8F3B"}
+{"version":3,"file":"openapi-runtime.d.ts","sourceRoot":"","sources":["../../src/executor/openapi-runtime.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AA2HD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,eAAe,CAAC,CA8H3B"}

package/executor/ssrf-guard.d.ts

@@ -4,7 +4,11 @@ export interface SsrfCheckResult {
     reason?: string;
 }
 export declare function isPrivateIPv4(ip: string): boolean;
+/** Metadata / link-local IPv4 — blocked even when `allowPrivateNetworks` is on. */
+export declare function isAlwaysForbiddenIPv4(ip: string): boolean;
 export declare function isPrivateIPv6(ip: string): boolean;
+/** Metadata / link-local IPv6 — blocked even when `allowPrivateNetworks` is on. */
+export declare function isAlwaysForbiddenIPv6(ip: string): boolean;
 /**
  * Validate an outbound URL against the allowlist + scheme rules + IP blocklist.
  *

package/executor/ssrf-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssrf-guard.d.ts","sourceRoot":"","sources":["../../src/executor/ssrf-guard.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAyBD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAQjD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAWjD;AAID;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,eAAe,CAAC,CA2C1B"}
+{"version":3,"file":"ssrf-guard.d.ts","sourceRoot":"","sources":["../../src/executor/ssrf-guard.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkDD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAOjD;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAWjD;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAazD;AAyBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EACjC,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,eAAe,CAAC,CAkF1B"}

package/index.d.ts

@@ -1,6 +1,7 @@
 import SkilledOpenApiPlugin from './skilled-openapi.plugin';
 export { SkilledOpenApiPlugin };
 export default SkilledOpenApiPlugin;
+export { SKILLED_OPENAPI_RUNTIME_DEPS_TOKEN, type SkilledOpenApiRuntimeDeps, } from './skilled-openapi.plugin';
 export { skilledOpenApiPluginOptionsSchema } from './skilled-openapi.types';
 export type { SkilledOpenApiPluginOptions, SkilledOpenApiPluginOptionsInput, BundleSourceOptions, StaticSourceOptions, NpmSourceOptions, SaasSourceOptions, SignatureKey, OutboundOptions, } from './skilled-openapi.types';
 export { SkilledOpenApiConfig, SkilledOpenApiCredentialResolver } from './skilled-openapi.symbols';

package/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAChC,eAAe,oBAAoB,CAAC;AAEpC,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAC5E,YAAY,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAChC,eAAe,oBAAoB,CAAC;AAMpC,OAAO,EACL,kCAAkC,EAClC,KAAK,yBAAyB,GAC/B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAC5E,YAAY,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC"}