@klhapp/skillmux 1.3.2 → 1.3.4

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.4](https://github.com/klhq/skillmux/compare/v1.3.3...v1.3.4) (2026-08-02)
+
+
+### Fixed
+
+* **schema:** align published contract with server and guard GBNF bounds ([#104](https://github.com/klhq/skillmux/issues/104)) ([eb33613](https://github.com/klhq/skillmux/commit/eb336136a77c96fe5b660532dfbe191134e55ed3))
+
+## [1.3.3](https://github.com/klhq/skillmux/compare/v1.3.2...v1.3.3) (2026-08-02)
+
+
+### Fixed
+
+* **server:** remove maxLength from resolve_skill schema to avoid GBNF overflow ([2621e73](https://github.com/klhq/skillmux/commit/2621e73bdb671d03ba8f458b7c3ceb223e8859c4))
+
 ## [1.3.2](https://github.com/klhq/skillmux/compare/v1.3.1...v1.3.2) (2026-07-31)
 
 

package/docs/schema.json

@@ -38,8 +38,7 @@
         "query": {
           "type": "string",
           "description": "Natural-language task description to route. Normalized (NFC) by the server; never semantically rewritten.",
-          "minLength": 1,
-          "maxLength": 8192
+          "minLength": 1
         }
       },
       "required": ["query"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@klhapp/skillmux",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "Skill management and retrieval for AI agents: sync native skills across clients and route the long tail over MCP",
   "type": "module",
   "private": false,

package/src/server.ts

@@ -64,46 +64,7 @@ function safeTokenEquals(a: string, b: string): boolean {
   return timingSafeEqual(bufA, bufB);
 }
 
-export async function startServer(opts?: {
-  transport?: "stdio" | "http";
-  port?: number;
-  config?: Config;
-  clients?: Partial<Clients>;
-  configPath?: string;
-}): Promise<ServerHandle> {
-  const configPath = resolveConfigPath(opts?.configPath);
-  const config = opts?.config ?? (await loadConfig(configPath));
-  const initialClients = { ...createClients(config), ...opts?.clients };
-  const snapshots = RuntimeSnapshotManager.create(config, initialClients);
-  const inactiveReloadStatus: ReloadStatus = {
-    last_successful_reload_at: null,
-    last_reload_error: null,
-    restart_required_keys: [],
-  };
-  configure({ config, clients: initialClients });
-  // An injected config has no guaranteed file source. Watch it only when the
-  // caller explicitly supplies that source; normal server startup always watches.
-  const watcherPath =
-    opts?.configPath ?? (opts?.config ? undefined : configPath);
-  const configWatcher = watcherPath
-    ? await ConfigWatcher.start(watcherPath, {
-        onReload: (nextConfig) => {
-          const nextClients = {
-            ...createClients(nextConfig),
-            ...opts?.clients,
-          };
-          snapshots.replace(nextConfig, nextClients);
-          configure({ config: nextConfig, clients: nextClients });
-        },
-        onError: (error) =>
-          console.error("skillmux config reload error:", error),
-      })
-    : undefined;
-  const stopWatcher = await startVaultWatcher();
-  const initPromise = initializeRuntime(readinessState)
-    .then(() => metricsRegistry.setReadiness(readinessState.get()))
-    .catch((err) => console.error("skillmux runtime init error:", err));
-
+export function createMcpServer(): McpServer {
   const server = new McpServer({ name: "skillmux", version: "0.1.0" });
 
   // Transport rule from schema.json: the SKILL.md body appears exactly once on
@@ -115,7 +76,7 @@ export async function startServer(opts?: {
         "Route a natural-language task description to the most relevant skill in the vault. " +
         "Returns outcome matched (skill delivered inline), ambiguous (shortlist — pick one, then call fetch_skill), " +
         "or no_match (proceed under your normal workflow).",
-      inputSchema: { query: z.string().min(1).max(8192) },
+      inputSchema: { query: z.string().min(1) },
     },
     async ({ query }) => {
       const startTime = performance.now();
@@ -166,6 +127,51 @@ export async function startServer(opts?: {
     },
   );
 
+  return server;
+}
+
+export async function startServer(opts?: {
+  transport?: "stdio" | "http";
+  port?: number;
+  config?: Config;
+  clients?: Partial<Clients>;
+  configPath?: string;
+}): Promise<ServerHandle> {
+  const configPath = resolveConfigPath(opts?.configPath);
+  const config = opts?.config ?? (await loadConfig(configPath));
+  const initialClients = { ...createClients(config), ...opts?.clients };
+  const snapshots = RuntimeSnapshotManager.create(config, initialClients);
+  const inactiveReloadStatus: ReloadStatus = {
+    last_successful_reload_at: null,
+    last_reload_error: null,
+    restart_required_keys: [],
+  };
+  configure({ config, clients: initialClients });
+  // An injected config has no guaranteed file source. Watch it only when the
+  // caller explicitly supplies that source; normal server startup always watches.
+  const watcherPath =
+    opts?.configPath ?? (opts?.config ? undefined : configPath);
+  const configWatcher = watcherPath
+    ? await ConfigWatcher.start(watcherPath, {
+        onReload: (nextConfig) => {
+          const nextClients = {
+            ...createClients(nextConfig),
+            ...opts?.clients,
+          };
+          snapshots.replace(nextConfig, nextClients);
+          configure({ config: nextConfig, clients: nextClients });
+        },
+        onError: (error) =>
+          console.error("skillmux config reload error:", error),
+      })
+    : undefined;
+  const stopWatcher = await startVaultWatcher();
+  const initPromise = initializeRuntime(readinessState)
+    .then(() => metricsRegistry.setReadiness(readinessState.get()))
+    .catch((err) => console.error("skillmux runtime init error:", err));
+
+  const server = createMcpServer();
+
   const transportType = opts?.transport ?? "stdio";
   if (transportType === "http") {
     const { WebStandardStreamableHTTPServerTransport } =