@qvac/harness 0.3.0 → 0.3.1

package/dist-lib/lib/tools/operations/manifest.d.ts

@@ -1,5 +1,12 @@
 import { z } from 'zod';
 import type { ToolParameters } from '../../capabilities/completion.ts';
+declare const ResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+    pick: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    decode: z.ZodEnum<{
+        "gmail-message": "gmail-message";
+    }>;
+}, z.core.$strict>]>;
 declare const OperationSchema: z.ZodObject<{
     tool: z.ZodString;
     description: z.ZodString;
@@ -16,6 +23,7 @@ declare const OperationSchema: z.ZodObject<{
             "drive-create-folder": "drive-create-folder";
             "drive-trash": "drive-trash";
             "gmail-draft": "gmail-draft";
+            "gmail-get": "gmail-get";
             "gmail-send": "gmail-send";
             "notion-create-page": "notion-create-page";
             "notion-insert-content": "notion-insert-content";
@@ -43,6 +51,7 @@ declare const OperationSchema: z.ZodObject<{
             "drive-create-folder": "drive-create-folder";
             "drive-trash": "drive-trash";
             "gmail-draft": "gmail-draft";
+            "gmail-get": "gmail-get";
             "gmail-send": "gmail-send";
             "notion-create-page": "notion-create-page";
             "notion-insert-content": "notion-insert-content";
@@ -51,10 +60,15 @@ declare const OperationSchema: z.ZodObject<{
             "sheets-write-values": "sheets-write-values";
         }>;
     }, z.core.$strip>]>;
-    response: z.ZodOptional<z.ZodObject<{
+    response: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         pick: z.ZodArray<z.ZodString>;
-    }, z.core.$strip>>;
+    }, z.core.$strict>, z.ZodObject<{
+        decode: z.ZodEnum<{
+            "gmail-message": "gmail-message";
+        }>;
+    }, z.core.$strict>]>>;
 }, z.core.$strip>;
 export type OperationSpec = z.infer<typeof OperationSchema>;
+export type OperationResponse = z.infer<typeof ResponseSchema>;
 export declare function parseOperationsManifest(json: string): OperationSpec[] | null;
 export {};

package/dist-lib/lib/tools/operations/manifest.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { BUILDER_NAMES } from './builders.js';
+import { DECODER_NAMES } from './decoders.js';
 const ParameterType = z.enum(['string', 'number', 'boolean', 'object', 'integer', 'array', 'null']);
 const ParameterSchema = z.lazy(() => z.object({
     type: z.union([ParameterType, z.array(ParameterType).min(1)]),
@@ -29,12 +30,16 @@ const McpRequestSchema = z.object({
     builder: z.enum(BUILDER_NAMES)
 });
 const RequestSchema = z.union([McpRequestSchema, HttpRequestSchema]);
+const ResponseSchema = z.union([
+    z.strictObject({ pick: z.array(z.string().min(1)).min(1) }),
+    z.strictObject({ decode: z.enum(DECODER_NAMES) })
+]);
 const OperationSchema = z.object({
     tool: z.string().min(1),
     description: z.string().min(1),
     parameters: ParametersSchema,
     request: RequestSchema,
-    response: z.object({ pick: z.array(z.string().min(1)).min(1) }).optional()
+    response: ResponseSchema.optional()
 });
 const ManifestSchema = z.object({ operations: z.array(OperationSchema) });
 export function parseOperationsManifest(json) {

package/dist-lib/lib/tools/skill.d.ts

@@ -1,6 +1,9 @@
 import type { ToolDefinition } from '../capabilities/completion.ts';
 import { type CredentialStoreFn } from './skills/auth-resolver.ts';
 export type ReadSkillFn = (name: string, file: string) => Promise<string> | string;
+export declare function mainFileRequested(name: string, file: unknown): boolean;
+export declare function skillFileArg(args: Record<string, unknown> | null | undefined): unknown;
+export declare function skillFileStem(file: string): string;
 export interface SkillToolOptions {
     skillsDir?: string;
     overlayDir?: string | null;

package/dist-lib/lib/tools/skill.js

@@ -10,6 +10,25 @@ import { parseToolGrant } from './skills/tool-grants.js';
 import { shellEscapeArg } from './exec/shell-argv.js';
 import { isObsidianVaultPath, OBSIDIAN_SKILL_NAME, OBSIDIAN_VAULT_PATH_CREDENTIAL_KEY } from './skills/obsidian-readiness.js';
 const MAIN_FILE = 'SKILL.md';
+const NO_FILE = /^(?:none|null|undefined|main)$/i;
+export function mainFileRequested(name, file) {
+    if (file === undefined || file === null)
+        return true;
+    const asked = unquoteArg(file).toLowerCase();
+    return (asked === '' ||
+        NO_FILE.test(asked) ||
+        asked === name.toLowerCase() ||
+        asked === MAIN_FILE.toLowerCase());
+}
+export function skillFileArg(args) {
+    return args?.file ?? args?.path ?? args?.filename;
+}
+export function skillFileStem(file) {
+    return file
+        .toLowerCase()
+        .replace(/^references\//, '')
+        .replace(/\.md$/, '');
+}
 function resolveSkillDir(root, name) {
     if (!root)
         return null;
@@ -47,6 +66,10 @@ async function listSkillFiles(drives, name) {
     }
     return [...files].sort();
 }
+function nearestFile(wanted, available) {
+    const matches = available.filter((file) => skillFileStem(file) === skillFileStem(wanted));
+    return matches.length === 1 ? matches[0] : null;
+}
 async function vaultModeNote(name, credentialStore, ctx) {
     if (name !== OBSIDIAN_SKILL_NAME || !credentialStore)
         return null;
@@ -107,13 +130,13 @@ export function createSkillTool({ skillsDir, overlayDir = resolveSkillsOverlayDi
         autoApprove: true,
         async execute(args, ctx) {
             const name = unquoteArg(args.name ?? args.skill_name ?? args.skill);
-            const fileArg = args.file ?? args.path ?? args.filename;
-            const file = fileArg === undefined || fileArg === null ? MAIN_FILE : unquoteArg(fileArg);
+            const fileArg = skillFileArg(args);
+            const file = mainFileRequested(name, fileArg) ? MAIN_FILE : unquoteArg(fileArg);
             if (file.startsWith('/') || file.includes('\\') || file.split('/').includes('..')) {
                 return { error: `file not found in skill ${name}: ${file}` };
             }
-            try {
-                const { raw, root } = await resolveSkill(name, file === '' ? MAIN_FILE : file);
+            const load = async (target) => {
+                const { raw, root } = await resolveSkill(name, target);
                 const { body, meta } = parseSkillFrontMatter(raw);
                 const dir = resolveSkillDir(root, name);
                 const content = dir ? body.replaceAll('{{SKILL_DIR}}', shellEscapeArg(dir)) : body;
@@ -123,14 +146,24 @@ export function createSkillTool({ skillsDir, overlayDir = resolveSkillsOverlayDi
                 ].filter(Boolean);
                 return {
                     name,
-                    file: file === MAIN_FILE || file === '' ? undefined : file,
+                    file: target === MAIN_FILE ? undefined : target,
                     content: notes.length ? [content.trim(), ...notes].join('\n\n') : content
                 };
+            };
+            try {
+                return await load(file);
             }
             catch {
                 if (file === MAIN_FILE)
                     return { error: `skill not found: ${name}` };
                 const available = await listSkillFiles([overlayDrive, baseDrive], name);
+                const near = nearestFile(file, available);
+                if (near !== null) {
+                    try {
+                        return await load(near);
+                    }
+                    catch { }
+                }
                 const rest = available.length
                     ? ` — files this skill has: ${available.join(', ')}`
                     : '. This skill has no other files; you already have its full instructions — act now.';

package/dist-lib/lib/tools/skills/manifest-parse.js

@@ -223,6 +223,46 @@ function readAuthParams(v) {
     const out = Object.fromEntries(Object.entries(record).filter(([key]) => !OAUTH_RESERVED_PARAMS.has(key)));
     return Object.keys(out).length > 0 ? out : undefined;
 }
+const OAUTH_ERROR_CODE = /^[a-z0-9_]+$/;
+function siteOf(url) {
+    return new URL(url).hostname.split('.').slice(-2).join('.');
+}
+function readVerifyRule(v) {
+    if (!isObj(v) || typeof v.error !== 'string' || !OAUTH_ERROR_CODE.test(v.error))
+        return undefined;
+    const status = Array.isArray(v.status)
+        ? v.status.filter((s) => Number.isInteger(s) && s >= 100 && s < 600)
+        : [];
+    const field = typeof v.field === 'string' && v.field.length > 0 ? v.field : undefined;
+    if (status.length === 0 && !field)
+        return undefined;
+    return {
+        error: v.error,
+        ...(status.length > 0 ? { status } : {}),
+        ...(field ? { field } : {}),
+        ...(field && typeof v.notEqual === 'string' ? { notEqual: v.notEqual } : {})
+    };
+}
+function readVerify(v, tokenUrl) {
+    if (!isObj(v))
+        return undefined;
+    const url = httpsUrl(v.url);
+    if (!url || siteOf(url) !== siteOf(tokenUrl))
+        return undefined;
+    if (v.method !== undefined && v.method !== null && v.method !== 'GET' && v.method !== 'POST') {
+        return undefined;
+    }
+    const reject = Array.isArray(v.reject) ? v.reject.flatMap((r) => readVerifyRule(r) ?? []) : [];
+    if (reject.length === 0)
+        return undefined;
+    const body = typeof v.body === 'string' ? v.body : isObj(v.body) ? JSON.stringify(v.body) : undefined;
+    return {
+        url,
+        ...(v.method === 'GET' || v.method === 'POST' ? { method: v.method } : {}),
+        ...(body !== undefined ? { body } : {}),
+        reject
+    };
+}
 function readOAuth(v) {
     if (!isObj(v))
         return undefined;
@@ -240,6 +280,7 @@ function readOAuth(v) {
         return undefined;
     const extraAuthParams = readAuthParams(v.extraAuthParams);
     const registrationEndpoint = httpsUrl(v.registrationEndpoint);
+    const verify = readVerify(v.verify, tokenUrl);
     return {
         stateKey: v.stateKey,
         authUrl,
@@ -249,7 +290,8 @@ function readOAuth(v) {
         ...(extraAuthParams ? { extraAuthParams } : {}),
         ...(registrationEndpoint ? { registrationEndpoint } : {}),
         ...(isPort(v.port) ? { port: v.port } : {}),
-        ...(typeof v.sharedIosSession === 'boolean' ? { sharedIosSession: v.sharedIosSession } : {})
+        ...(typeof v.sharedIosSession === 'boolean' ? { sharedIosSession: v.sharedIosSession } : {}),
+        ...(verify ? { verify } : {})
     };
 }
 export function toWireSetup(setup) {

package/dist-lib/lib/tools/skills/manifest.d.ts

@@ -39,6 +39,19 @@ export interface SkillOAuthConfig {
     readonly registrationEndpoint?: string;
     readonly port?: number;
     readonly sharedIosSession?: boolean;
+    readonly verify?: SkillOAuthVerify;
+}
+export interface SkillOAuthVerify {
+    readonly url: string;
+    readonly method?: 'GET' | 'POST';
+    readonly body?: string;
+    readonly reject: readonly SkillOAuthVerifyRule[];
+}
+export interface SkillOAuthVerifyRule {
+    readonly error: string;
+    readonly status?: readonly number[];
+    readonly field?: string;
+    readonly notEqual?: string;
 }
 export interface SkillSetupRoute {
     readonly kind: 'oauth' | 'token' | 'install' | 'picker' | 'instructions';

package/dist-lib/schema/harness.js

@@ -645,6 +645,24 @@ export function registerHarnessTypes(ns) {
             { name: 'value', type: 'string', required: true }
         ]
     });
+    ns.register({
+        name: 'skill-oauth-verify-rule',
+        fields: [
+            { name: 'error', type: 'string', required: true },
+            { name: 'status', type: 'uint', array: true },
+            { name: 'field', type: 'string' },
+            { name: 'notEqual', type: 'string' }
+        ]
+    });
+    ns.register({
+        name: 'skill-oauth-verify',
+        fields: [
+            { name: 'url', type: 'string', required: true },
+            { name: 'method', type: 'string' },
+            { name: 'body', type: 'string' },
+            { name: 'reject', type: '@harness/skill-oauth-verify-rule', array: true }
+        ]
+    });
     ns.register({
         name: 'skill-oauth-config',
         fields: [
@@ -656,7 +674,8 @@ export function registerHarnessTypes(ns) {
             { name: 'extraAuthParams', type: '@harness/skill-oauth-param', array: true },
             { name: 'registrationEndpoint', type: 'string' },
             { name: 'port', type: 'uint' },
-            { name: 'sharedIosSession', type: 'bool' }
+            { name: 'sharedIosSession', type: 'bool' },
+            { name: 'verify', type: '@harness/skill-oauth-verify' }
         ]
     });
 }

package/dist-lib/spec/hrpc/messages.js

@@ -1,12 +1,12 @@
 // This file is autogenerated by the hyperschema compiler
-// Schema Version: 12
+// Schema Version: 13
 /* eslint-disable camelcase */
 /* eslint-disable quotes */
 /* eslint-disable space-before-function-paren */
 
 import { c } from 'hyperschema/runtime'
 
-const VERSION = 12
+const VERSION = 13
 
 // eslint-disable-next-line no-unused-vars
 let version = VERSION
@@ -3045,12 +3045,13 @@ const encoding82 = {
     c.string.preencode(state, m.authUrl)
     c.string.preencode(state, m.tokenUrl)
     c.string.preencode(state, m.tokenAuth)
-    state.end++ // max flag is 16 so always one byte
+    state.end++ // max flag is 32 so always one byte
 
     if (version >= 11 && m.scopes) encoding82_4.preencode(state, m.scopes)
     if (version >= 11 && m.extraAuthParams) encoding82_5.preencode(state, m.extraAuthParams)
     if (version >= 11 && m.registrationEndpoint) c.string.preencode(state, m.registrationEndpoint)
     if (version >= 11 && m.port) c.uint.preencode(state, m.port)
+    if (version >= 13 && m.verify) encoding82_9.preencode(state, m.verify)
   },
   encode(state, m) {
     const flags =
@@ -3058,7 +3059,8 @@ const encoding82 = {
       ((version >= 11 && m.extraAuthParams) ? 2 : 0) |
       ((version >= 11 && m.registrationEndpoint) ? 4 : 0) |
       ((version >= 11 && m.port) ? 8 : 0) |
-      ((version >= 11 && m.sharedIosSession) ? 16 : 0)
+      ((version >= 11 && m.sharedIosSession) ? 16 : 0) |
+      ((version >= 13 && m.verify) ? 32 : 0)
 
     c.string.encode(state, m.stateKey)
     c.string.encode(state, m.authUrl)
@@ -3070,6 +3072,7 @@ const encoding82 = {
     if (version >= 11 && m.extraAuthParams) encoding82_5.encode(state, m.extraAuthParams)
     if (version >= 11 && m.registrationEndpoint) c.string.encode(state, m.registrationEndpoint)
     if (version >= 11 && m.port) c.uint.encode(state, m.port)
+    if (version >= 13 && m.verify) encoding82_9.encode(state, m.verify)
   },
   decode(state) {
     const r0 = c.string.decode(state)
@@ -3087,7 +3090,86 @@ const encoding82 = {
       extraAuthParams: (version >= 11 && (flags & 2) !== 0) ? encoding82_5.decode(state) : null,
       registrationEndpoint: (version >= 11 && (flags & 4) !== 0) ? c.string.decode(state) : null,
       port: (version >= 11 && (flags & 8) !== 0) ? c.uint.decode(state) : 0,
-      sharedIosSession: (version >= 11 && (flags & 16) !== 0)
+      sharedIosSession: (version >= 11 && (flags & 16) !== 0),
+      verify: (version >= 13 && (flags & 32) !== 0) ? encoding82_9.decode(state) : null
+    }
+  }
+}
+
+// @harness/skill-oauth-verify-rule.status
+const encoding83_1 = c.array(c.uint)
+
+// @harness/skill-oauth-verify-rule
+const encoding83 = {
+  preencode(state, m) {
+    c.string.preencode(state, m.error)
+    state.end++ // max flag is 4 so always one byte
+
+    if (version >= 13 && m.status) encoding83_1.preencode(state, m.status)
+    if (version >= 13 && m.field) c.string.preencode(state, m.field)
+    if (version >= 13 && m.notEqual) c.string.preencode(state, m.notEqual)
+  },
+  encode(state, m) {
+    const flags =
+      ((version >= 13 && m.status) ? 1 : 0) |
+      ((version >= 13 && m.field) ? 2 : 0) |
+      ((version >= 13 && m.notEqual) ? 4 : 0)
+
+    c.string.encode(state, m.error)
+    c.uint.encode(state, flags)
+
+    if (version >= 13 && m.status) encoding83_1.encode(state, m.status)
+    if (version >= 13 && m.field) c.string.encode(state, m.field)
+    if (version >= 13 && m.notEqual) c.string.encode(state, m.notEqual)
+  },
+  decode(state) {
+    const r0 = c.string.decode(state)
+    const flags = c.uint.decode(state)
+
+    return {
+      error: r0,
+      status: (version >= 13 && (flags & 1) !== 0) ? encoding83_1.decode(state) : null,
+      field: (version >= 13 && (flags & 2) !== 0) ? c.string.decode(state) : null,
+      notEqual: (version >= 13 && (flags & 4) !== 0) ? c.string.decode(state) : null
+    }
+  }
+}
+
+// @harness/skill-oauth-verify.reject
+const encoding84_3 = c.array(c.frame(encoding83))
+
+// @harness/skill-oauth-verify
+const encoding84 = {
+  preencode(state, m) {
+    c.string.preencode(state, m.url)
+    state.end++ // max flag is 4 so always one byte
+
+    if (version >= 13 && m.method) c.string.preencode(state, m.method)
+    if (version >= 13 && m.body) c.string.preencode(state, m.body)
+    if (version >= 13 && m.reject) encoding84_3.preencode(state, m.reject)
+  },
+  encode(state, m) {
+    const flags =
+      ((version >= 13 && m.method) ? 1 : 0) |
+      ((version >= 13 && m.body) ? 2 : 0) |
+      ((version >= 13 && m.reject) ? 4 : 0)
+
+    c.string.encode(state, m.url)
+    c.uint.encode(state, flags)
+
+    if (version >= 13 && m.method) c.string.encode(state, m.method)
+    if (version >= 13 && m.body) c.string.encode(state, m.body)
+    if (version >= 13 && m.reject) encoding84_3.encode(state, m.reject)
+  },
+  decode(state) {
+    const r0 = c.string.decode(state)
+    const flags = c.uint.decode(state)
+
+    return {
+      url: r0,
+      method: (version >= 13 && (flags & 1) !== 0) ? c.string.decode(state) : null,
+      body: (version >= 13 && (flags & 2) !== 0) ? c.string.decode(state) : null,
+      reject: (version >= 13 && (flags & 4) !== 0) ? encoding84_3.decode(state) : null
     }
   }
 }
@@ -3100,6 +3182,8 @@ const encoding28_14 = c.frame(encoding51)
 const encoding42_2 = c.frame(encoding57)
 // @harness/skill-setup-route-v2.oauth, deferred due to recusive use
 const encoding50_10 = c.frame(encoding82)
+// @harness/skill-oauth-config.verify, deferred due to recusive use
+const encoding82_9 = c.frame(encoding84)
 
 function setVersion(v) {
   version = v
@@ -3318,6 +3402,10 @@ function getEncoding(name) {
       return encoding81
     case '@harness/skill-oauth-config':
       return encoding82
+    case '@harness/skill-oauth-verify-rule':
+      return encoding83
+    case '@harness/skill-oauth-verify':
+      return encoding84
     default:
       throw new Error('Encoder not found ' + name)
   }

package/dist-lib/spec/hyperschema/index.js

@@ -1,12 +1,12 @@
 // This file is autogenerated by the hyperschema compiler
-// Schema Version: 12
+// Schema Version: 13
 /* eslint-disable camelcase */
 /* eslint-disable quotes */
 /* eslint-disable space-before-function-paren */
 
 import { c } from 'hyperschema/runtime'
 
-const VERSION = 12
+const VERSION = 13
 
 // eslint-disable-next-line no-unused-vars
 let version = VERSION
@@ -3045,12 +3045,13 @@ const encoding82 = {
     c.string.preencode(state, m.authUrl)
     c.string.preencode(state, m.tokenUrl)
     c.string.preencode(state, m.tokenAuth)
-    state.end++ // max flag is 16 so always one byte
+    state.end++ // max flag is 32 so always one byte
 
     if (version >= 11 && m.scopes) encoding82_4.preencode(state, m.scopes)
     if (version >= 11 && m.extraAuthParams) encoding82_5.preencode(state, m.extraAuthParams)
     if (version >= 11 && m.registrationEndpoint) c.string.preencode(state, m.registrationEndpoint)
     if (version >= 11 && m.port) c.uint.preencode(state, m.port)
+    if (version >= 13 && m.verify) encoding82_9.preencode(state, m.verify)
   },
   encode(state, m) {
     const flags =
@@ -3058,7 +3059,8 @@ const encoding82 = {
       ((version >= 11 && m.extraAuthParams) ? 2 : 0) |
       ((version >= 11 && m.registrationEndpoint) ? 4 : 0) |
       ((version >= 11 && m.port) ? 8 : 0) |
-      ((version >= 11 && m.sharedIosSession) ? 16 : 0)
+      ((version >= 11 && m.sharedIosSession) ? 16 : 0) |
+      ((version >= 13 && m.verify) ? 32 : 0)
 
     c.string.encode(state, m.stateKey)
     c.string.encode(state, m.authUrl)
@@ -3070,6 +3072,7 @@ const encoding82 = {
     if (version >= 11 && m.extraAuthParams) encoding82_5.encode(state, m.extraAuthParams)
     if (version >= 11 && m.registrationEndpoint) c.string.encode(state, m.registrationEndpoint)
     if (version >= 11 && m.port) c.uint.encode(state, m.port)
+    if (version >= 13 && m.verify) encoding82_9.encode(state, m.verify)
   },
   decode(state) {
     const r0 = c.string.decode(state)
@@ -3087,7 +3090,86 @@ const encoding82 = {
       extraAuthParams: (version >= 11 && (flags & 2) !== 0) ? encoding82_5.decode(state) : null,
       registrationEndpoint: (version >= 11 && (flags & 4) !== 0) ? c.string.decode(state) : null,
       port: (version >= 11 && (flags & 8) !== 0) ? c.uint.decode(state) : 0,
-      sharedIosSession: (version >= 11 && (flags & 16) !== 0)
+      sharedIosSession: (version >= 11 && (flags & 16) !== 0),
+      verify: (version >= 13 && (flags & 32) !== 0) ? encoding82_9.decode(state) : null
+    }
+  }
+}
+
+// @harness/skill-oauth-verify-rule.status
+const encoding83_1 = c.array(c.uint)
+
+// @harness/skill-oauth-verify-rule
+const encoding83 = {
+  preencode(state, m) {
+    c.string.preencode(state, m.error)
+    state.end++ // max flag is 4 so always one byte
+
+    if (version >= 13 && m.status) encoding83_1.preencode(state, m.status)
+    if (version >= 13 && m.field) c.string.preencode(state, m.field)
+    if (version >= 13 && m.notEqual) c.string.preencode(state, m.notEqual)
+  },
+  encode(state, m) {
+    const flags =
+      ((version >= 13 && m.status) ? 1 : 0) |
+      ((version >= 13 && m.field) ? 2 : 0) |
+      ((version >= 13 && m.notEqual) ? 4 : 0)
+
+    c.string.encode(state, m.error)
+    c.uint.encode(state, flags)
+
+    if (version >= 13 && m.status) encoding83_1.encode(state, m.status)
+    if (version >= 13 && m.field) c.string.encode(state, m.field)
+    if (version >= 13 && m.notEqual) c.string.encode(state, m.notEqual)
+  },
+  decode(state) {
+    const r0 = c.string.decode(state)
+    const flags = c.uint.decode(state)
+
+    return {
+      error: r0,
+      status: (version >= 13 && (flags & 1) !== 0) ? encoding83_1.decode(state) : null,
+      field: (version >= 13 && (flags & 2) !== 0) ? c.string.decode(state) : null,
+      notEqual: (version >= 13 && (flags & 4) !== 0) ? c.string.decode(state) : null
+    }
+  }
+}
+
+// @harness/skill-oauth-verify.reject
+const encoding84_3 = c.array(c.frame(encoding83))
+
+// @harness/skill-oauth-verify
+const encoding84 = {
+  preencode(state, m) {
+    c.string.preencode(state, m.url)
+    state.end++ // max flag is 4 so always one byte
+
+    if (version >= 13 && m.method) c.string.preencode(state, m.method)
+    if (version >= 13 && m.body) c.string.preencode(state, m.body)
+    if (version >= 13 && m.reject) encoding84_3.preencode(state, m.reject)
+  },
+  encode(state, m) {
+    const flags =
+      ((version >= 13 && m.method) ? 1 : 0) |
+      ((version >= 13 && m.body) ? 2 : 0) |
+      ((version >= 13 && m.reject) ? 4 : 0)
+
+    c.string.encode(state, m.url)
+    c.uint.encode(state, flags)
+
+    if (version >= 13 && m.method) c.string.encode(state, m.method)
+    if (version >= 13 && m.body) c.string.encode(state, m.body)
+    if (version >= 13 && m.reject) encoding84_3.encode(state, m.reject)
+  },
+  decode(state) {
+    const r0 = c.string.decode(state)
+    const flags = c.uint.decode(state)
+
+    return {
+      url: r0,
+      method: (version >= 13 && (flags & 1) !== 0) ? c.string.decode(state) : null,
+      body: (version >= 13 && (flags & 2) !== 0) ? c.string.decode(state) : null,
+      reject: (version >= 13 && (flags & 4) !== 0) ? encoding84_3.decode(state) : null
     }
   }
 }
@@ -3100,6 +3182,8 @@ const encoding28_14 = c.frame(encoding51)
 const encoding42_2 = c.frame(encoding57)
 // @harness/skill-setup-route-v2.oauth, deferred due to recusive use
 const encoding50_10 = c.frame(encoding82)
+// @harness/skill-oauth-config.verify, deferred due to recusive use
+const encoding82_9 = c.frame(encoding84)
 
 function setVersion(v) {
   version = v
@@ -3318,6 +3402,10 @@ function getEncoding(name) {
       return encoding81
     case '@harness/skill-oauth-config':
       return encoding82
+    case '@harness/skill-oauth-verify-rule':
+      return encoding83
+    case '@harness/skill-oauth-verify':
+      return encoding84
     default:
       throw new Error('Encoder not found ' + name)
   }

package/dist-lib/spec/hyperschema/schema.json

@@ -1,5 +1,5 @@
 {
-  "version": 12,
+  "version": 13,
   "schema": [
     {
       "name": "empty",
@@ -2486,6 +2486,71 @@
           "name": "sharedIosSession",
           "type": "bool",
           "version": 11
+        },
+        {
+          "name": "verify",
+          "type": "@harness/skill-oauth-verify",
+          "version": 13
+        }
+      ]
+    },
+    {
+      "name": "skill-oauth-verify-rule",
+      "namespace": "harness",
+      "compact": false,
+      "flagsPosition": 1,
+      "fields": [
+        {
+          "name": "error",
+          "required": true,
+          "type": "string",
+          "version": 13
+        },
+        {
+          "name": "status",
+          "array": true,
+          "type": "uint",
+          "version": 13
+        },
+        {
+          "name": "field",
+          "type": "string",
+          "version": 13
+        },
+        {
+          "name": "notEqual",
+          "type": "string",
+          "version": 13
+        }
+      ]
+    },
+    {
+      "name": "skill-oauth-verify",
+      "namespace": "harness",
+      "compact": false,
+      "flagsPosition": 1,
+      "fields": [
+        {
+          "name": "url",
+          "required": true,
+          "type": "string",
+          "version": 13
+        },
+        {
+          "name": "method",
+          "type": "string",
+          "version": 13
+        },
+        {
+          "name": "body",
+          "type": "string",
+          "version": 13
+        },
+        {
+          "name": "reject",
+          "array": true,
+          "type": "@harness/skill-oauth-verify-rule",
+          "version": 13
         }
       ]
     }