@knitli/openapi-mcp 1.0.0 → 1.1.0

package/README.md

@@ -217,6 +217,17 @@ restart with the remaining valid catalogs. Config requires at least one catalog;
 leave the server stopped if disabling the last one. Removing a file while the
 process is using it is not a reliable disable procedure.
 
+## Complete release admission
+
+`admitCatalogRelease(options, catalogId, releaseId)` from
+`@knitli/openapi-mcp/runtime` verifies every signed inventory operation and
+schema before admitting the generation through the configured `GenerationStore`.
+It revalidates the manifest and inventory around generation CAS retries. Use
+this supported portable API when activating an executable catalog; `admitManifest`
+retains its signed-envelope-only contract. Storage must preserve immutable release
+identities. Admission does not guarantee future availability, so runtime reads
+continue verifying records at use time.
+
 ## Recover from a bad release
 
 Before release, record the prior **observed package version**, its tarball digest,

package/dist/runtime/admission.d.ts

@@ -0,0 +1,8 @@
+import type { AdmittedManifest } from "./manifest.ts";
+import { type OpenApiRuntimeOptions } from "./runtime.ts";
+import type { CatalogId, ReleaseId } from "./types.ts";
+/** Verify the complete release inventory before atomically admitting its generation.
+ * Storage must preserve immutable release identities; later runtime reads still
+ * verify records because this check cannot guarantee future storage availability.
+ */
+export declare function admitCatalogRelease(options: OpenApiRuntimeOptions, catalogId: CatalogId, releaseId: ReleaseId): Promise<AdmittedManifest>;

package/dist/runtime/admission.js

@@ -0,0 +1,9 @@
+import { admitExecutableRelease, verifyExecutableRelease, } from "./runtime.js";
+/** Verify the complete release inventory before atomically admitting its generation.
+ * Storage must preserve immutable release identities; later runtime reads still
+ * verify records because this check cannot guarantee future storage availability.
+ */
+export async function admitCatalogRelease(options, catalogId, releaseId) {
+    const preflight = await verifyExecutableRelease(options, catalogId, releaseId);
+    return admitExecutableRelease(options, preflight);
+}

package/dist/runtime/index.d.ts

@@ -1,4 +1,5 @@
 export type { ActionDispatchPermit } from "./action-permit.ts";
+export { admitCatalogRelease } from "./admission.ts";
 export { classifyOperation, type OperationClassification, } from "./classify.ts";
 export { digestCredentialAuthorizationBinding, snapshotCredentialAuthorizationBinding, } from "./credential-binding.ts";
 export { sha256, verifyEd25519 } from "./digest.ts";

package/dist/runtime/index.js

@@ -1,3 +1,4 @@
+export { admitCatalogRelease } from "./admission.js";
 export { classifyOperation, } from "./classify.js";
 export { digestCredentialAuthorizationBinding, snapshotCredentialAuthorizationBinding, } from "./credential-binding.js";
 export { sha256, verifyEd25519 } from "./digest.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@knitli/openapi-mcp",
   "private": false,
-  "version": "1.0.0",
+  "version": "1.1.0",
   "type": "module",
   "description": "Compile signed OpenAPI catalogs and serve verified search and authorized API calls over MCP.",
   "license": "MIT OR Apache-2.0",