@frontmcp/sdk 0.7.1 → 0.8.0

package/skill/cache/skill-http-cache.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Caching for skills HTTP endpoints.
+ *
+ * Provides a cache abstraction for skill HTTP responses to reduce
+ * latency and CPU overhead for repeated requests.
+ *
+ * Supports:
+ * - Memory cache (default, single-instance)
+ * - Redis cache (distributed, multi-instance)
+ *
+ * @module skill/cache/skill-http-cache
+ */
+import type { SkillMetadata } from '../../common/metadata';
+/**
+ * Cache interface for skills HTTP endpoints.
+ */
+export interface SkillHttpCache {
+    /** Cache type identifier */
+    readonly type: 'memory' | 'redis';
+    /**
+     * Get cached /llm.txt content.
+     * @returns Cached content or null if not cached/expired
+     */
+    getLlmTxt(): Promise<string | null>;
+    /**
+     * Set cached /llm.txt content.
+     * @param content - Content to cache
+     */
+    setLlmTxt(content: string): Promise<void>;
+    /**
+     * Get cached /llm_full.txt content.
+     * @returns Cached content or null if not cached/expired
+     */
+    getLlmFullTxt(): Promise<string | null>;
+    /**
+     * Set cached /llm_full.txt content.
+     * @param content - Content to cache
+     */
+    setLlmFullTxt(content: string): Promise<void>;
+    /**
+     * Get cached skills list.
+     * @param hash - Hash of filter parameters
+     * @returns Cached skills or null if not cached/expired
+     */
+    getSkillsList(hash: string): Promise<SkillMetadata[] | null>;
+    /**
+     * Set cached skills list.
+     * @param hash - Hash of filter parameters
+     * @param skills - Skills to cache
+     */
+    setSkillsList(hash: string, skills: SkillMetadata[]): Promise<void>;
+    /**
+     * Get cached individual skill.
+     * @param skillId - Skill identifier
+     * @returns Cached skill data or null if not cached/expired
+     */
+    getSkill(skillId: string): Promise<unknown | null>;
+    /**
+     * Set cached individual skill.
+     * @param skillId - Skill identifier
+     * @param data - Skill data to cache
+     */
+    setSkill(skillId: string, data: unknown): Promise<void>;
+    /**
+     * Invalidate all cached data.
+     */
+    invalidateAll(): Promise<void>;
+    /**
+     * Invalidate cached data for a specific skill.
+     * @param skillId - Skill identifier
+     */
+    invalidateSkill(skillId: string): Promise<void>;
+    /**
+     * Dispose of cache resources.
+     */
+    dispose(): Promise<void>;
+}
+/**
+ * In-memory implementation of SkillHttpCache.
+ *
+ * Suitable for single-instance deployments.
+ * Data is lost on process restart.
+ */
+export declare class MemorySkillHttpCache implements SkillHttpCache {
+    readonly type: "memory";
+    private readonly cache;
+    private readonly ttlMs;
+    constructor(ttlMs?: number);
+    getLlmTxt(): Promise<string | null>;
+    setLlmTxt(content: string): Promise<void>;
+    getLlmFullTxt(): Promise<string | null>;
+    setLlmFullTxt(content: string): Promise<void>;
+    getSkillsList(hash: string): Promise<SkillMetadata[] | null>;
+    setSkillsList(hash: string, skills: SkillMetadata[]): Promise<void>;
+    getSkill(skillId: string): Promise<unknown | null>;
+    setSkill(skillId: string, data: unknown): Promise<void>;
+    invalidateAll(): Promise<void>;
+    invalidateSkill(skillId: string): Promise<void>;
+    dispose(): Promise<void>;
+    private get;
+    private set;
+}
+/**
+ * Redis implementation of SkillHttpCache.
+ *
+ * Suitable for distributed/multi-instance deployments.
+ * Persists across process restarts (within TTL).
+ */
+export declare class RedisSkillHttpCache implements SkillHttpCache {
+    readonly type: "redis";
+    private readonly keyPrefix;
+    private readonly ttlMs;
+    private readonly getClient;
+    constructor(options: {
+        getClient: () => Promise<RedisClient>;
+        keyPrefix?: string;
+        ttlMs?: number;
+    });
+    getLlmTxt(): Promise<string | null>;
+    setLlmTxt(content: string): Promise<void>;
+    getLlmFullTxt(): Promise<string | null>;
+    setLlmFullTxt(content: string): Promise<void>;
+    getSkillsList(hash: string): Promise<SkillMetadata[] | null>;
+    setSkillsList(hash: string, skills: SkillMetadata[]): Promise<void>;
+    getSkill(skillId: string): Promise<unknown | null>;
+    setSkill(skillId: string, data: unknown): Promise<void>;
+    invalidateAll(): Promise<void>;
+    invalidateSkill(skillId: string): Promise<void>;
+    dispose(): Promise<void>;
+    private get;
+    private set;
+}
+/**
+ * Minimal Redis client interface used by the cache.
+ * Compatible with ioredis and @vercel/kv.
+ */
+interface RedisClient {
+    get(key: string): Promise<string | null>;
+    setex(key: string, seconds: number, value: string): Promise<unknown>;
+    del(...keys: string[]): Promise<unknown>;
+    keys(pattern: string): Promise<string[]>;
+}
+export {};
+//# sourceMappingURL=skill-http-cache.d.ts.map

package/skill/cache/skill-http-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-http-cache.d.ts","sourceRoot":"","sources":["../../../src/skill/cache/skill-http-cache.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IAElC;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEpC;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1C;;;OAGG;IACH,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAExC;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC;IAE7D;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAEnD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD;;OAEG;IACH,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/B;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAUD;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,cAAc;IACzD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAElC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,KAAK,SAAQ;IAInB,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAInC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIvC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC;IAI5D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIlD,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB/C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,OAAO,CAAC,GAAG;IAYX,OAAO,CAAC,GAAG;CAMZ;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;gBAE3C,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAM5F,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAInC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIvC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC;IAI5D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIlD,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAY9B,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB/C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,GAAG;YAYH,GAAG;CAWlB;AAED;;;GAGG;AACH,UAAU,WAAW;IACnB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC1C"}

package/skill/cache/skill-http-cache.factory.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Factory for creating skill HTTP cache instances.
+ *
+ * @module skill/cache/skill-http-cache.factory
+ */
+import type { FrontMcpLogger } from '../../common/index.js';
+import { SkillHttpCache } from './skill-http-cache.js';
+/**
+ * Redis configuration options for the cache.
+ *
+ * Supports 'redis' (uses ioredis under the hood) and 'vercel-kv' providers.
+ */
+export interface SkillHttpCacheRedisOptions {
+    /** Redis provider type */
+    provider: 'redis' | 'vercel-kv' | '@vercel/kv';
+    /** Redis host */
+    host?: string;
+    /** Redis port */
+    port?: number;
+    /** Redis password */
+    password?: string;
+    /** Redis database number */
+    db?: number;
+}
+/**
+ * Options for creating a skill HTTP cache.
+ */
+export interface SkillHttpCacheOptions {
+    /**
+     * Redis configuration for distributed caching.
+     * If not provided, falls back to memory cache.
+     */
+    redis?: SkillHttpCacheRedisOptions;
+    /**
+     * Cache TTL in milliseconds.
+     * @default 60000 (1 minute)
+     */
+    ttlMs?: number;
+    /**
+     * Key prefix for Redis cache.
+     * @default 'frontmcp:skills:cache:'
+     */
+    keyPrefix?: string;
+    /**
+     * Optional logger for cache operations.
+     */
+    logger?: FrontMcpLogger;
+}
+/**
+ * Result of creating a skill HTTP cache.
+ */
+export interface SkillHttpCacheResult {
+    /** The cache instance */
+    cache: SkillHttpCache;
+    /** The cache type that was created */
+    type: 'memory' | 'redis';
+}
+/**
+ * Create a skill HTTP cache from configuration.
+ *
+ * If Redis configuration is provided, creates a Redis-backed cache.
+ * Otherwise, falls back to an in-memory cache.
+ *
+ * @param options - Cache configuration
+ * @returns Cache instance and type
+ *
+ * @example Memory cache (default)
+ * ```typescript
+ * const { cache, type } = await createSkillHttpCache({ ttlMs: 30000 });
+ * // type === 'memory'
+ * ```
+ *
+ * @example Redis cache
+ * ```typescript
+ * const { cache, type } = await createSkillHttpCache({
+ *   redis: { provider: 'redis', host: 'localhost', port: 6379 },
+ *   ttlMs: 60000,
+ * });
+ * // type === 'redis'
+ * ```
+ */
+export declare function createSkillHttpCache(options?: SkillHttpCacheOptions): Promise<SkillHttpCacheResult>;
+//# sourceMappingURL=skill-http-cache.factory.d.ts.map

package/skill/cache/skill-http-cache.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-http-cache.factory.d.ts","sourceRoot":"","sources":["../../../src/skill/cache/skill-http-cache.factory.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAA6C,MAAM,uBAAuB,CAAC;AAElG;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,0BAA0B;IAC1B,QAAQ,EAAE,OAAO,GAAG,WAAW,GAAG,YAAY,CAAC;IAC/C,iBAAiB;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,KAAK,CAAC,EAAE,0BAA0B,CAAC;IAEnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,yBAAyB;IACzB,KAAK,EAAE,cAAc,CAAC;IACtB,sCAAsC;IACtC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC1B;AAWD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAyB7G"}

package/skill/cache/skill-http-cache.holder.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Singleton holder for skill HTTP cache instances.
+ *
+ * This provides a way to share cache instances across flows
+ * without requiring full scope integration.
+ *
+ * @module skill/cache/skill-http-cache.holder
+ */
+import type { ScopeEntry } from '../../common/index.js';
+import { SkillHttpCache } from './skill-http-cache.js';
+/**
+ * Get or create a skill HTTP cache for a scope.
+ *
+ * @param scope - The scope entry
+ * @returns Cache instance (may be shared with other flows in same scope)
+ */
+export declare function getSkillHttpCache(scope: ScopeEntry): Promise<SkillHttpCache | null>;
+/**
+ * Invalidate cache for a scope.
+ *
+ * @param scopeId - Scope identifier
+ */
+export declare function invalidateScopeCache(scopeId: string): Promise<void>;
+/**
+ * Invalidate a specific skill in a scope's cache.
+ *
+ * @param scopeId - Scope identifier
+ * @param skillId - Skill identifier
+ */
+export declare function invalidateSkillInCache(scopeId: string, skillId: string): Promise<void>;
+/**
+ * Dispose all caches (for testing/cleanup).
+ */
+export declare function disposeAllCaches(): Promise<void>;
+//# sourceMappingURL=skill-http-cache.holder.d.ts.map

package/skill/cache/skill-http-cache.holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-http-cache.holder.d.ts","sourceRoot":"","sources":["../../../src/skill/cache/skill-http-cache.holder.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAc7E;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAkCzF;AA0CD;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5F;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMtD"}

package/skill/errors/index.d.ts

@@ -0,0 +1,3 @@
+export * from './tool-not-allowed.error';
+export * from './skill-validation.error';
+//# sourceMappingURL=index.d.ts.map

package/skill/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/skill/errors/index.ts"],"names":[],"mappings":"AAEA,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC"}

package/skill/errors/skill-validation.error.d.ts

@@ -0,0 +1,110 @@
+import { PublicMcpError } from '../../errors';
+/**
+ * Result of validating a single skill's tool references.
+ */
+export interface SkillValidationResult {
+    /**
+     * Unique identifier of the skill.
+     */
+    skillId: string;
+    /**
+     * Name of the skill.
+     */
+    skillName: string;
+    /**
+     * Validation status.
+     * - 'valid': All tools are available
+     * - 'warning': Some tools are missing/hidden but validation mode is 'warn'
+     * - 'failed': Tools are missing/hidden and validation mode is 'strict'
+     */
+    status: 'valid' | 'warning' | 'failed';
+    /**
+     * Tools that are referenced but not found in the registry.
+     */
+    missingTools: string[];
+    /**
+     * Tools that exist but are hidden (not visible to clients).
+     */
+    hiddenTools: string[];
+    /**
+     * Validation mode used for this skill.
+     */
+    validationMode: 'strict' | 'warn' | 'ignore';
+}
+/**
+ * Report of validating all skills in a registry.
+ */
+export interface SkillValidationReport {
+    /**
+     * Validation results for each skill.
+     */
+    results: SkillValidationResult[];
+    /**
+     * Whether all skills passed validation (no 'failed' status).
+     */
+    isValid: boolean;
+    /**
+     * Total number of skills validated.
+     */
+    totalSkills: number;
+    /**
+     * Number of skills with 'failed' status.
+     */
+    failedCount: number;
+    /**
+     * Number of skills with 'warning' status.
+     */
+    warningCount: number;
+}
+/**
+ * Error thrown when skill tool validation fails in strict mode.
+ *
+ * This error is thrown during skill registry initialization when:
+ * 1. A skill references tools that don't exist in the tool registry
+ * 2. The skill's toolValidation mode is 'strict'
+ * 3. failOnInvalidSkills is enabled (registry-level)
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await skillRegistry.validateAllTools();
+ * } catch (error) {
+ *   if (error instanceof SkillValidationError) {
+ *     console.log('Failed skills:', error.failedSkills);
+ *   }
+ * }
+ * ```
+ */
+export declare class SkillValidationError extends PublicMcpError {
+    readonly mcpErrorCode: -32602;
+    /**
+     * Skills that failed validation.
+     */
+    readonly failedSkills: SkillValidationResult[];
+    /**
+     * Full validation report including all skills.
+     */
+    readonly report: SkillValidationReport;
+    constructor(message: string, report: SkillValidationReport);
+    /**
+     * Create a SkillValidationError from a validation report.
+     */
+    static fromReport(report: SkillValidationReport): SkillValidationError;
+    getPublicMessage(): string;
+    toJsonRpcError(): {
+        code: -32602;
+        message: string;
+        data: {
+            failedSkills: {
+                skillId: string;
+                skillName: string;
+                missingTools: string[];
+                hiddenTools: string[];
+            }[];
+            totalSkills: number;
+            failedCount: number;
+            warningCount: number;
+        };
+    };
+}
+//# sourceMappingURL=skill-validation.error.d.ts.map

package/skill/errors/skill-validation.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-validation.error.d.ts","sourceRoot":"","sources":["../../../src/skill/errors/skill-validation.error.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IAEvC;;OAEG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB;;OAEG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB;;OAEG;IACH,cAAc,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAEjC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,oBAAqB,SAAQ,cAAc;IACtD,QAAQ,CAAC,YAAY,SAAkC;IAEvD;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAE/C;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;gBAE3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB;IAO1D;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,qBAAqB,GAAG,oBAAoB;IAW7D,gBAAgB,IAAI,MAAM;IAInC,cAAc;;;;;;;;;;;;;;;CAiBf"}

package/skill/errors/tool-not-allowed.error.d.ts

@@ -0,0 +1,66 @@
+import { PublicMcpError } from '../../errors';
+import type { ToolAuthorizationResult } from '../session/skill-session.types';
+/**
+ * Error thrown when a tool call is not authorized by the active skill(s).
+ *
+ * This error is thrown in 'strict' policy mode when a tool not in the
+ * skill's allowlist is called. Supports both single and multiple active skills.
+ *
+ * @example
+ * ```typescript
+ * const authResult = sessionManager.checkToolAuthorization('some_tool');
+ * if (!authResult.allowed) {
+ *   throw new ToolNotAllowedError(authResult);
+ * }
+ * ```
+ */
+export declare class ToolNotAllowedError extends PublicMcpError {
+    readonly mcpErrorCode: -32600;
+    readonly toolName: string;
+    readonly skillId: string | undefined;
+    readonly skillName: string | undefined;
+    readonly activeSkillIds: string[];
+    readonly activeSkillNames: string[];
+    readonly reason: ToolAuthorizationResult['reason'];
+    readonly allowedTools: string[];
+    constructor(authResult: ToolAuthorizationResult, allowedTools?: string[]);
+    private static formatMessage;
+    /**
+     * Format the skill display string, handling multiple active skills.
+     */
+    private static formatSkillDisplay;
+    getPublicMessage(): string;
+    toJsonRpcError(): {
+        code: -32600;
+        message: string;
+        data: {
+            toolName: string;
+            skillId: string | undefined;
+            skillName: string | undefined;
+            activeSkillIds: string[];
+            activeSkillNames: string[];
+            reason: "skill_allowlist" | "dynamically_approved" | "no_active_skill" | "not_in_allowlist" | "denied" | "rate_limited";
+            allowedTools: string[];
+        };
+    };
+}
+/**
+ * Error thrown when tool approval is required but not granted.
+ */
+export declare class ToolApprovalRequiredError extends PublicMcpError {
+    readonly mcpErrorCode: -32600;
+    readonly toolName: string;
+    readonly skillId: string | undefined;
+    constructor(toolName: string, skillId?: string);
+    getPublicMessage(): string;
+    toJsonRpcError(): {
+        code: -32600;
+        message: string;
+        data: {
+            toolName: string;
+            skillId: string | undefined;
+            requiresApproval: boolean;
+        };
+    };
+}
+//# sourceMappingURL=tool-not-allowed.error.d.ts.map

package/skill/errors/tool-not-allowed.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-not-allowed.error.d.ts","sourceRoot":"","sources":["../../../src/skill/errors/tool-not-allowed.error.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,qBAAa,mBAAoB,SAAQ,cAAc;IACrD,QAAQ,CAAC,YAAY,SAAmC;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAEpB,UAAU,EAAE,uBAAuB,EAAE,YAAY,GAAE,MAAM,EAAO;IAa5E,OAAO,CAAC,MAAM,CAAC,aAAa;IA8C5B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAaxB,gBAAgB,IAAI,MAAM;IAInC,cAAc;;;;;;;;;;;;;CAef;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,cAAc;IAC3D,QAAQ,CAAC,YAAY,SAAmC;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEzB,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAUrC,gBAAgB,IAAI,MAAM;IAInC,cAAc;;;;;;;;;CAWf"}

package/skill/flows/http/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Skills HTTP Flows
+ *
+ * HTTP endpoints for skill discovery and loading.
+ * These flows are conditionally registered when skillsConfig.enabled is true.
+ *
+ * @module skill/flows/http
+ */
+export { default as LlmTxtFlow } from './llm-txt.flow';
+export { default as LlmFullTxtFlow } from './llm-full-txt.flow';
+export { default as SkillsApiFlow } from './skills-api.flow';
+//# sourceMappingURL=index.d.ts.map

package/skill/flows/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/index.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/skill/flows/http/llm-full-txt.flow.d.ts

@@ -0,0 +1,70 @@
+/**
+ * HTTP flow for GET /llm_full.txt endpoint.
+ * Returns full skill content with instructions and tool schemas.
+ */
+import { FlowBase, FlowRunOptions, ScopeEntry, ServerRequest } from '../../../common';
+import { z } from 'zod';
+declare const inputSchema: z.ZodObject<{
+    request: z.ZodObject<{}, z.core.$loose>;
+    response: z.ZodObject<{}, z.core.$loose>;
+    next: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+}, z.core.$strip>;
+declare const stateSchema: z.ZodObject<{
+    prefix: z.ZodString;
+}, z.core.$strip>;
+declare const outputSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"text">;
+    status: z.ZodNumber;
+    body: z.ZodString;
+    contentType: z.ZodDefault<z.ZodString>;
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<{
+            strict: "strict";
+            lax: "lax";
+            none: "none";
+        }>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, z.core.$strip>>>>;
+}, z.core.$strip>;
+declare const plan: {
+    readonly pre: ["checkEnabled"];
+    readonly execute: ["generateContent"];
+};
+declare global {
+    interface ExtendFlows {
+        'skills-http:llm-full-txt': FlowRunOptions<LlmFullTxtFlow, typeof plan, typeof inputSchema, typeof outputSchema, typeof stateSchema>;
+    }
+}
+declare const name: "skills-http:llm-full-txt";
+/**
+ * Flow for serving full skill content at /llm_full.txt.
+ *
+ * This endpoint provides complete skill information including:
+ * - Full instructions
+ * - Complete tool schemas (input/output)
+ * - Parameters
+ * - Examples
+ *
+ * Useful for multi-agent architectures where planner agents need
+ * comprehensive skill information to create execution plans.
+ */
+export default class LlmFullTxtFlow extends FlowBase<typeof name> {
+    logger: import("../../../common").FrontMcpLogger;
+    /**
+     * Check if this flow should handle the request.
+     * Matches GET requests to /llm_full.txt or configured path.
+     */
+    static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    checkEnabled(): Promise<void>;
+    generateContent(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=llm-full-txt.flow.d.ts.map

package/skill/flows/http/llm-full-txt.flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-full-txt.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/llm-full-txt.flow.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,OAAO,EAEL,QAAQ,EAER,cAAc,EAId,UAAU,EACV,aAAa,EAId,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,QAAA,MAAM,WAAW;;;;iBAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;iBAEf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;iBAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,0BAA0B,EAAE,cAAc,CACxC,cAAc,EACd,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,0BAAmC,CAAC;AAGjD;;;;;;;;;;;GAWG;AAWH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC/D,MAAM,2CAA4C;IAElD;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAqBhE,YAAY;IAoCZ,eAAe;CAsDtB"}

package/skill/flows/http/llm-txt.flow.d.ts

@@ -0,0 +1,77 @@
+/**
+ * HTTP flow for GET /llm.txt endpoint.
+ * Returns compact skill summaries in plain text format.
+ */
+import { FlowBase, FlowRunOptions, ScopeEntry, ServerRequest } from '../../../common';
+import { z } from 'zod';
+declare const inputSchema: z.ZodObject<{
+    request: z.ZodObject<{}, z.core.$loose>;
+    response: z.ZodObject<{}, z.core.$loose>;
+    next: z.ZodOptional<z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>;
+}, z.core.$strip>;
+declare const stateSchema: z.ZodObject<{
+    prefix: z.ZodString;
+}, z.core.$strip>;
+declare const outputSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"text">;
+    status: z.ZodNumber;
+    body: z.ZodString;
+    contentType: z.ZodDefault<z.ZodString>;
+    headers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>]>>>>;
+    cookies: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        path: z.ZodDefault<z.ZodString>;
+        domain: z.ZodOptional<z.ZodString>;
+        httpOnly: z.ZodDefault<z.ZodBoolean>;
+        secure: z.ZodOptional<z.ZodBoolean>;
+        sameSite: z.ZodOptional<z.ZodEnum<{
+            strict: "strict";
+            lax: "lax";
+            none: "none";
+        }>>;
+        maxAge: z.ZodOptional<z.ZodNumber>;
+        expires: z.ZodOptional<z.ZodDate>;
+    }, z.core.$strip>>>>;
+}, z.core.$strip>;
+declare const plan: {
+    readonly pre: ["checkEnabled"];
+    readonly execute: ["generateContent"];
+};
+declare global {
+    interface ExtendFlows {
+        'skills-http:llm-txt': FlowRunOptions<LlmTxtFlow, typeof plan, typeof inputSchema, typeof outputSchema, typeof stateSchema>;
+    }
+}
+declare const name: "skills-http:llm-txt";
+/**
+ * Flow for serving skill summaries at /llm.txt.
+ *
+ * This endpoint provides a compact, LLM-friendly summary of all available skills.
+ * Each skill is listed with its name, description, tools, and tags.
+ *
+ * @example Response format
+ * ```
+ * # review-pr
+ * Review a GitHub pull request
+ * Tools: github_get_pr, github_add_comment
+ * Tags: github, code-review
+ *
+ * ---
+ *
+ * # deploy-app
+ * Deploy application to production
+ * ```
+ */
+export default class LlmTxtFlow extends FlowBase<typeof name> {
+    logger: import("../../../common").FrontMcpLogger;
+    /**
+     * Check if this flow should handle the request.
+     * Matches GET requests to /llm.txt or configured path.
+     */
+    static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
+    checkEnabled(): Promise<void>;
+    generateContent(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=llm-txt.flow.d.ts.map

package/skill/flows/http/llm-txt.flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-txt.flow.d.ts","sourceRoot":"","sources":["../../../../src/skill/flows/http/llm-txt.flow.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,OAAO,EAEL,QAAQ,EAER,cAAc,EAId,UAAU,EACV,aAAa,EAId,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,QAAA,MAAM,WAAW;;;;iBAAkB,CAAC;AAEpC,QAAA,MAAM,WAAW;;iBAEf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;iBAAiB,CAAC;AAEpC,QAAA,MAAM,IAAI;;;CAG2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,qBAAqB,EAAE,cAAc,CACnC,UAAU,EACV,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,qBAA8B,CAAC;AAG5C;;;;;;;;;;;;;;;;;;GAkBG;AAWH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC3D,MAAM,2CAAwC;IAE9C;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO;IAqBhE,YAAY;IAoCZ,eAAe;CAuDtB"}