v0.4.0
@askalf/fieldpass v0.4.0
Added
- Session-recorder / canon-skill plane over MCP (#30) — the last plane that was reachable only as a JS import is now on the MCP server.
picket_record_startopens a named recording; addrecord: "<name>"topicket_observe/picket_gate/picket_loginto append each governed step (secrets redacted, withheld payloads never recorded).picket_skill_emitserializes it into a canon-pinnable manifest with itsskillHash— goldens reduced to fingerprints, so a withheld payload can't be recovered through the manifest, while the per-stepverdictstill signals recorded hostility.picket_skill_replayre-runs a recording (or a manifest) against the live browser and reports per-step drift +regressedToInjection.
With this, all five planes — perception, action, identity, verification, skill — are reachable over MCP. Additive and backward-compatible (MCP tool count 6 → 9).
Published to npm via OIDC trusted publishing. Full test suite (131) green on Node 20 and 22.
Full changelog: https://github.com/askalf/fieldpass/blob/main/CHANGELOG.md