@knitli/openapi-mcp 0.0.0 → 1.1.0

package/README.md

@@ -16,10 +16,14 @@ established; use Node for `serve`. `/runtime` and `/conformance` pass an isolate
 WebWorker-only declaration check and browser bundle. This is not evidence of an
 actual Cloudflare D1 deployment or D1 conformance.
 
-The source version is `0.0.0`. Registry publication, trusted publishing, and
-registry provenance verification remain release gates, not claims made by this
-README. For a locally built and tested tarball, install its absolute path from a
-clean consumer directory:
+The source version is `0.0.0`. That version was published under the `bootstrap`
+dist-tag on 2026-09-05; its public installation, signatures, provenance, and
+installed consumer were verified. See the [bootstrap release record](../../docs/superpowers/reviews/2026-09-05-openapi-mcp-bootstrap.md)
+for the exact artifact and workflow binding. This is not a stable `latest`
+release or evidence of a successful trusted-publishing release.
+
+For a locally built and tested tarball, install its absolute path from a clean
+consumer directory:
 
 ```sh
 npm install --ignore-scripts /absolute/path/to/openapi-mcp.tgz
@@ -28,8 +32,8 @@ node --version
 
 After a real stable version is observed in npm, pin that exact verified version
 with `npm install --save-exact @knitli/openapi-mcp@<verified-version>`. A bootstrap
-`0.0.0` publication, if needed, uses the `bootstrap` dist-tag and is not a stable
-release. The CLI examples below use the consumer's `node_modules/.bin` binary.
+`0.0.0` publication uses the `bootstrap` dist-tag and is not a stable release.
+The CLI examples below use the consumer's `node_modules/.bin` binary.
 
 ## Generate a signing key and compile a release
 
@@ -213,6 +217,17 @@ restart with the remaining valid catalogs. Config requires at least one catalog;
 leave the server stopped if disabling the last one. Removing a file while the
 process is using it is not a reliable disable procedure.
 
+## Complete release admission
+
+`admitCatalogRelease(options, catalogId, releaseId)` from
+`@knitli/openapi-mcp/runtime` verifies every signed inventory operation and
+schema before admitting the generation through the configured `GenerationStore`.
+It revalidates the manifest and inventory around generation CAS retries. Use
+this supported portable API when activating an executable catalog; `admitManifest`
+retains its signed-envelope-only contract. Storage must preserve immutable release
+identities. Admission does not guarantee future availability, so runtime reads
+continue verifying records at use time.
+
 ## Recover from a bad release
 
 Before release, record the prior **observed package version**, its tarball digest,
@@ -341,14 +356,21 @@ external setup and bootstrap-cleanup gates. Until then, build/test/validation
 still run and publication is explicitly reported as pending. A real build,
 publication, or audit failure continues to fail the job and its dependents.
 
-If the package does not yet exist, bootstrap is a separate exception requiring
-recorded named owner approval and protected-environment approval. It publishes
-only `0.0.0`, with `--access public --tag bootstrap --provenance`; it does not run
-semantic-release or create a Git tag/release. A short-lived granular token may be
-injected only into that protected job, never into local files, logs, commits, or
-artifacts. After bootstrap, configure the exact trusted publisher, remove token
-variables and the GitHub secret, revoke the token, and commit the OIDC-only
-workflow before allowing the first real `latest` release.
+The one-time `0.0.0` bootstrap is complete. Its manual dispatch and token-backed
+jobs have been removed; do not rerun publication of that version. The adapter
+still rejects token environment mappings, including mappings in disabled jobs.
+The [bootstrap release record](../../docs/superpowers/reviews/2026-09-05-openapi-mcp-bootstrap.md)
+separates verified publication and secret removal from owner-reported npm setup
+and the remaining first-`latest` gate.
+
+After publication, the verification step waits for the exact version to appear
+in the public package listing before attempting a fresh installation. Only a
+missing package or missing version is retried: at most six requests, each with
+a ten-second timeout, separated by ten-second waits. Invalid metadata and other
+errors fail the check. This readiness probe cannot guarantee every registry
+replica or tarball URL is ready. Installation, cryptographic verification, and
+consumer checks remain mandatory; publication itself is never retried by this
+probe.
 
 For bootstrap and every stable release, retain a fresh public install's
 `npm audit signatures --json --include-attestations` output in the protected job

package/dist/runtime/admission.d.ts

@@ -0,0 +1,8 @@
+import type { AdmittedManifest } from "./manifest.ts";
+import { type OpenApiRuntimeOptions } from "./runtime.ts";
+import type { CatalogId, ReleaseId } from "./types.ts";
+/** Verify the complete release inventory before atomically admitting its generation.
+ * Storage must preserve immutable release identities; later runtime reads still
+ * verify records because this check cannot guarantee future storage availability.
+ */
+export declare function admitCatalogRelease(options: OpenApiRuntimeOptions, catalogId: CatalogId, releaseId: ReleaseId): Promise<AdmittedManifest>;

package/dist/runtime/admission.js

@@ -0,0 +1,9 @@
+import { admitExecutableRelease, verifyExecutableRelease, } from "./runtime.js";
+/** Verify the complete release inventory before atomically admitting its generation.
+ * Storage must preserve immutable release identities; later runtime reads still
+ * verify records because this check cannot guarantee future storage availability.
+ */
+export async function admitCatalogRelease(options, catalogId, releaseId) {
+    const preflight = await verifyExecutableRelease(options, catalogId, releaseId);
+    return admitExecutableRelease(options, preflight);
+}

package/dist/runtime/index.d.ts

@@ -1,4 +1,5 @@
 export type { ActionDispatchPermit } from "./action-permit.ts";
+export { admitCatalogRelease } from "./admission.ts";
 export { classifyOperation, type OperationClassification, } from "./classify.ts";
 export { digestCredentialAuthorizationBinding, snapshotCredentialAuthorizationBinding, } from "./credential-binding.ts";
 export { sha256, verifyEd25519 } from "./digest.ts";

package/dist/runtime/index.js

@@ -1,3 +1,4 @@
+export { admitCatalogRelease } from "./admission.js";
 export { classifyOperation, } from "./classify.js";
 export { digestCredentialAuthorizationBinding, snapshotCredentialAuthorizationBinding, } from "./credential-binding.js";
 export { sha256, verifyEd25519 } from "./digest.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@knitli/openapi-mcp",
   "private": false,
-  "version": "0.0.0",
+  "version": "1.1.0",
   "type": "module",
   "description": "Compile signed OpenAPI catalogs and serve verified search and authorized API calls over MCP.",
   "license": "MIT OR Apache-2.0",
@@ -111,6 +111,16 @@
               "release": "patch"
             },
             {
+              "scope": "!@(openapi-mcp)",
+              "release": false
+            },
+            {
+              "scope": null,
+              "release": false
+            },
+            {
+              "scope": "openapi-mcp",
+              "type": "!@(feat|fix|perf)",
               "release": false
             }
           ]