@enfyra/mcp-server 0.1.49 → 0.1.50

package/dist/lib/mcp-instructions.js

@@ -22,7 +22,7 @@ export function buildMcpServerInstructions(apiBaseUrl, options = {}) {
         '- For target sanity checks, call `get_enfyra_api_context`; do not load broad metadata only to confirm the API base.',
         '- When the goal is clear but the tool path is not, call `discover_enfyra_workflows` with intent/risk/surface. Use `detail: "plan"` before writes, follow `primaryPath`, and treat `avoidTools` as hard negative-routing boundaries.',
         '- Discover before deciding, then inspect narrowly. Use `inspect_table`, `inspect_route`, `inspect_feature`, `search_admin_extensions`, or `search_runtime_zone` for the exact table/route/feature/runtime artifact. Run broad discovery tools sequentially, not in parallel.',
-        '- Load examples only when needed with `get_enfyra_examples`. For OAuth use `get_enfyra_examples({ category: "oauth-setup" })`. For extension UI, call `get_extension_theme_contract` before writing or reviewing UI, use `build_extension_ui` after the extension acknowledgement for high-contract components and theme decisions such as drawers, modals, page shell headers/actions, permission gates, empty states, resource lists, FormEditor, Widget, menu/account panel registries, tabs, upload modals, theme classes/review, and full review, and call `get_theme_class_reference` only for theme internals or an explicitly requested full class map.',
+        '- Load examples only when needed with `get_enfyra_examples`. For OAuth use `get_enfyra_examples({ category: "oauth-setup" })`. For extension UI, call `get_extension_theme_contract` before writing or reviewing UI, use `build_extension_ui` after the extension acknowledgement for high-contract components, app composables, and theme decisions such as drawers, modals, page shell headers/actions, permission gates, empty states, resource lists, FormEditor, Widget, menu/account panel registries, tabs, upload modals, api usage, notify, runtime/theme classes/review, and full review, and call `get_theme_class_reference` only for theme internals or an explicitly requested full class map.',
         '- Prefer the most specific business operation tool over raw metadata CRUD.',
         '- Before any write, call `get_enfyra_required_knowledge({ scope })` with the right scope and pass returned ack keys into write tools. Choose scope by task domain:',
         '  • `schema` — table, column, relation, record CRUD, route permission, guard, field permission, column rule, cache reload, GraphQL enablement, log debug.',

package/dist/lib/mcp-instructions.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-instructions.js","sourceRoot":"","sources":["../../src/lib/mcp-instructions.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,UAAU;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO;QACL,cAAc,EAAE,GAAG,IAAI,UAAU;QACjC,gBAAgB,EAAE,GAAG,IAAI,iBAAiB;KAC3C,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,0BAA0B,CAAC,UAAU,EAAE,UAAiC,EAAE;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;IAEvD,OAAO;QACL,eAAe;QACf,EAAE;QACF,gCAAgC,IAAI,KAAK;QACzC,wBAAwB,cAAc,YAAY,gBAAgB,KAAK;QACvE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,EAAE;QACF,qBAAqB;QACrB,qJAAqJ;QACrJ,qHAAqH;QACrH,qOAAqO;QACrO,8QAA8Q;QAC9Q,ioBAAioB;QACjoB,4EAA4E;QAC5E,oKAAoK;QACpK,2JAA2J;QAC3J,uJAAuJ;QACvJ,8IAA8I;QAC9I,yDAAyD;QACzD,4EAA4E;QAC5E,sMAAsM;QACtM,mLAAmL;QACnL,8LAA8L;QAC9L,EAAE;QACF,0BAA0B;QAC1B,uHAAuH;QACvH,sLAAsL;QACtL,gLAAgL;QAChL,iLAAiL;QACjL,yLAAyL;QACzL,kKAAkK;QAClK,0HAA0H;QAC1H,4LAA4L;QAC5L,EAAE;QACF,+BAA+B;QAC/B,4HAA4H;QAC5H,4GAA4G;QAC5G,mIAAmI;QACnI,kJAAkJ;QAClJ,oNAAoN;QACpN,iKAAiK;QACjK,gIAAgI;QAChI,EAAE;QACF,+BAA+B;QAC/B,iIAAiI;QACjI,uJAAuJ;QACvJ,yOAAyO;QACzO,+JAA+J;QAC/J,iMAAiM;QACjM,wSAAwS;QACxS,qLAAqL;QACrL,kPAAkP;QAClP,+PAA+P;QAC/P,EAAE;QACF,4BAA4B;QAC5B,0MAA0M;QAC1M,oHAAoH;QACpH,kIAAkI;QAClI,8MAA8M;QAC9M,kNAAkN;QAClN,wLAAwL;QACxL,EAAE;QACF,uIAAuI;KACxI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"mcp-instructions.js","sourceRoot":"","sources":["../../src/lib/mcp-instructions.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,UAAU;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO;QACL,cAAc,EAAE,GAAG,IAAI,UAAU;QACjC,gBAAgB,EAAE,GAAG,IAAI,iBAAiB;KAC3C,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,0BAA0B,CAAC,UAAU,EAAE,UAAiC,EAAE;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;IAEvD,OAAO;QACL,eAAe;QACf,EAAE;QACF,gCAAgC,IAAI,KAAK;QACzC,wBAAwB,cAAc,YAAY,gBAAgB,KAAK;QACvE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,EAAE;QACF,qBAAqB;QACrB,qJAAqJ;QACrJ,qHAAqH;QACrH,qOAAqO;QACrO,8QAA8Q;QAC9Q,8qBAA8qB;QAC9qB,4EAA4E;QAC5E,oKAAoK;QACpK,2JAA2J;QAC3J,uJAAuJ;QACvJ,8IAA8I;QAC9I,yDAAyD;QACzD,4EAA4E;QAC5E,sMAAsM;QACtM,mLAAmL;QACnL,8LAA8L;QAC9L,EAAE;QACF,0BAA0B;QAC1B,uHAAuH;QACvH,sLAAsL;QACtL,gLAAgL;QAChL,iLAAiL;QACjL,yLAAyL;QACzL,kKAAkK;QAClK,0HAA0H;QAC1H,4LAA4L;QAC5L,EAAE;QACF,+BAA+B;QAC/B,4HAA4H;QAC5H,4GAA4G;QAC5G,mIAAmI;QACnI,kJAAkJ;QAClJ,oNAAoN;QACpN,iKAAiK;QACjK,gIAAgI;QAChI,EAAE;QACF,+BAA+B;QAC/B,iIAAiI;QACjI,uJAAuJ;QACvJ,yOAAyO;QACzO,+JAA+J;QAC/J,iMAAiM;QACjM,wSAAwS;QACxS,qLAAqL;QACrL,kPAAkP;QAClP,+PAA+P;QAC/P,EAAE;QACF,4BAA4B;QAC5B,0MAA0M;QAC1M,oHAAoH;QACpH,kIAAkI;QAClI,8MAA8M;QAC9M,kNAAkN;QAClN,wLAAwL;QACxL,EAAE;QACF,uIAAuI;KACxI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/lib/platform-operation-tools.d.ts

@@ -76,6 +76,16 @@ export declare function buildExtensionUploadModalSnippet(input: any): {
     companionSnippet: string;
     contract: string[];
 };
+export declare function buildExtensionApiUsageSnippet(input?: AnyRecord): {
+    action: string;
+    snippet: string;
+    contract: string[];
+};
+export declare function buildExtensionNotifySnippet(input?: AnyRecord): {
+    action: string;
+    snippet: string;
+    contract: string[];
+};
 export declare function reviewExtensionUiContract(code: any): {
     action: string;
     valid: boolean;
@@ -88,6 +98,18 @@ export declare function reviewExtensionUiContract(code: any): {
     }[];
     nextSteps: string[];
 };
+export declare function reviewExtensionRuntimeContract(code: any): {
+    action: string;
+    valid: boolean;
+    issueCount: number;
+    issues: {
+        severity: "error" | "warning";
+        rule: string;
+        message: string;
+        suggestion: string;
+    }[];
+    nextSteps: string[];
+};
 export declare function reviewExtensionThemeContract(code: any): {
     action: string;
     valid: boolean;
@@ -105,6 +127,7 @@ export declare function validateExtensionCodeLocally(code: any): {
     componentCasing: string;
     fieldWidth: string;
     themeContract: string;
+    runtimeContract: string;
 };
 export declare function validateExtensionCode(apiUrl: any, code: any, name: any): Promise<{
     valid: boolean;
@@ -112,6 +135,7 @@ export declare function validateExtensionCode(apiUrl: any, code: any, name: any)
         componentCasing: string;
         fieldWidth: string;
         themeContract: string;
+        runtimeContract: string;
     };
     extensionId: any;
     compiledLength: any;

package/dist/lib/platform-operation-tools.js

@@ -836,6 +836,88 @@ export function buildExtensionUploadModalSnippet(input) {
         ],
     };
 }
+function toPascalIdentifier(value, fallback = 'Items') {
+    const raw = String(value || fallback)
+        .replace(/[^a-zA-Z0-9]+/g, ' ')
+        .trim()
+        .split(/\s+/)
+        .filter(Boolean)
+        .map((part) => `${part.charAt(0).toUpperCase()}${part.slice(1)}`)
+        .join('');
+    return raw || fallback;
+}
+export function buildExtensionApiUsageSnippet(input = {}) {
+    const resource = String(input.resource || input.name || 'items');
+    const pascal = toPascalIdentifier(resource, 'Items');
+    const path = input.path || `/${resource}`;
+    const method = String(input.method || 'GET').toUpperCase();
+    const responseName = input.responseName || `${resource}Response`;
+    const pendingName = input.pendingName || `${resource}Pending`;
+    const errorName = input.errorName || `${resource}Error`;
+    const executeName = input.executeName || (method === 'GET' ? `load${pascal}` : `${method.toLowerCase()}${pascal}`);
+    const refreshName = input.refreshName || `refresh${pascal}`;
+    const options = [];
+    if (method !== 'GET')
+        options.push(`method: ${quoteJsString(method)}`);
+    if (input.queryExpression)
+        options.push(`query: ${input.queryExpression}`);
+    if (input.bodyExpression)
+        options.push(`body: ${input.bodyExpression}`);
+    if (input.errorContext)
+        options.push(`errorContext: ${quoteJsString(input.errorContext)}`);
+    if (input.onErrorExpression)
+        options.push(`onError: ${input.onErrorExpression}`);
+    const optionsLiteral = options.length ? `, {\n  ${options.join(',\n  ')}\n}` : '';
+    const lines = [
+        `const { data: ${responseName}, pending: ${pendingName}, error: ${errorName}, execute: ${executeName}, refresh: ${refreshName} } = useApi(${quoteJsString(path)}${optionsLiteral});`,
+    ];
+    if (method === 'GET') {
+        const rowsName = input.rowsName || resource;
+        lines.push(`const ${rowsName} = computed(() => ${responseName}.value?.data || []);`);
+        if (input.autoLoad !== false) {
+            lines.push(`onMounted(() => { ${executeName}(); });`);
+        }
+    }
+    else {
+        const handlerName = input.handlerName || `${method.toLowerCase()}${pascal}Record`;
+        lines.push(...[
+            '',
+            `async function ${handlerName}(payload) {`,
+            `  const response = await ${executeName}({ body: payload });`,
+            '  if (!response) return null;',
+            '  return response;',
+            '}',
+        ]);
+    }
+    return {
+        action: 'extension_api_usage_built',
+        snippet: lines.join('\n'),
+        contract: [
+            'useApi returns refs plus execute/refresh; it does not auto-run.',
+            'Pass query/body as objects or computed objects, not JSON.stringify strings.',
+            'Read normal list rows from data.value?.data or from the direct execute() response.',
+            'For mutations, call execute({ body }), execute({ id, body }), execute({ id }), or execute({ ids }) from a user action.',
+        ],
+    };
+}
+export function buildExtensionNotifySnippet(input = {}) {
+    const kind = ['success', 'error', 'warning', 'info'].includes(input.kind) ? input.kind : 'success';
+    const title = input.title || (kind === 'success' ? 'Saved' : 'Notice');
+    const description = input.description || '';
+    const args = description ? `${quoteJsString(title)}, ${quoteJsString(description)}` : quoteJsString(title);
+    return {
+        action: 'extension_notify_usage_built',
+        snippet: [
+            'const notify = useNotify();',
+            `await notify.${kind}(${args});`,
+        ].join('\n'),
+        contract: [
+            'useNotify exposes success/error/warning/info(title, description?) helpers.',
+            'Do not pass Nuxt toast object payloads and do not call notify.add().',
+            'The helpers are async; await them inside submit/mutation handlers when ordering matters.',
+        ],
+    };
+}
 export function reviewExtensionUiContract(code) {
     const source = String(code || '');
     const issues = [];
@@ -881,6 +963,45 @@ export function reviewExtensionUiContract(code) {
             : ['Snippet matches the checked modal/drawer contract rules. Still validate the final SFC before saving.'],
     };
 }
+function collectExtensionRuntimeIssues(code) {
+    const source = String(code || '');
+    const issues = [];
+    const push = (severity, rule, message, suggestion) => issues.push({ severity, rule, message, suggestion });
+    if (/(?:^|[>\n;])\s*import(?:\s.+?\sfrom\s+|\s*['"])/m.test(source)) {
+        push('error', 'static-import', 'Static import statements are not allowed in enfyra_extension.code.', 'Use injected globals/components directly, or load app packages with getPackages(["package-name"]) inside runtime code.');
+    }
+    if (/\buseToast\s*\(/.test(source)) {
+        push('error', 'use-toast-directly', 'Dynamic extensions should not call useToast() directly.', 'Use useNotify() and call success/error/warning/info(title, description?).');
+    }
+    if (/\buseNotify\s*\(\s*\)\s*\.add\s*\(/.test(source) || /\b\w+\s*\.add\s*\(\s*\{\s*title\s*:/.test(source)) {
+        push('error', 'use-notify-add', 'useNotify() does not accept Nuxt toast object payloads through add().', 'Call notify.success/error/warning/info(title, description?) instead.');
+    }
+    if (/\b(?:query|body|filter|deep|aggregate)\s*:\s*JSON\.stringify\s*\(/.test(source)) {
+        push('error', 'use-api-json-stringify-options', 'useApi query/body/filter/deep/aggregate options must be plain objects or computed objects, not JSON strings.', 'Pass the object directly to useApi or execute().');
+    }
+    if (/\bawait\s+useApi\s*\(/.test(source)) {
+        push('error', 'await-use-api', 'useApi() is a composable that returns refs plus execute/refresh; it should not be awaited.', 'Destructure execute/refresh from useApi(), then await execute() inside onMounted, watchers, or user actions.');
+    }
+    if (/\buseApi\s*\(/.test(source) && !/\bexecute\s*:/.test(source) && !/\brefresh\s*:/.test(source) && !/\.\s*(?:execute|refresh)\s*\(/.test(source)) {
+        push('warning', 'use-api-no-execute-alias', 'useApi() appears without an execute/refresh alias or call.', 'Remember useApi does not auto-run; destructure execute/refresh and call execute() deliberately.');
+    }
+    if (/\buseNotify\s*\(/.test(source) && !/\bnotify\.(?:success|error|warning|info)\s*\(/.test(source) && !/\b(?:success|error|warning|info)\s*:\s*\w+/.test(source)) {
+        push('warning', 'use-notify-no-helper-call', 'useNotify() appears without a success/error/warning/info helper call.', 'Use the semantic helper methods instead of low-level toast payloads.');
+    }
+    return issues;
+}
+export function reviewExtensionRuntimeContract(code) {
+    const issues = collectExtensionRuntimeIssues(code);
+    return {
+        action: 'extension_runtime_contract_reviewed',
+        valid: issues.every((issue) => issue.severity !== 'error'),
+        issueCount: issues.length,
+        issues,
+        nextSteps: issues.length
+            ? ['Use build_extension_ui kind=api_usage or kind=notify for known-good snippets, then patch/update the extension.']
+            : ['Snippet matches the checked runtime composable/package rules. Still validate the final SFC before saving.'],
+    };
+}
 const THEME_CLASS_INTENTS = {
     neutral_surface: {
         classes: 'eapp-surface-card eapp-radius-panel border eapp-divider',
@@ -1088,6 +1209,18 @@ export function buildExtensionUiSnippet(kind, input = {}) {
         case 'upload_modal':
             result = buildExtensionUploadModalSnippet(input);
             break;
+        case 'api_usage':
+            result = buildExtensionApiUsageSnippet(input);
+            break;
+        case 'notify':
+            result = buildExtensionNotifySnippet(input);
+            break;
+        case 'runtime_review':
+            if (!input?.code) {
+                throw new Error('build_extension_ui kind=runtime_review requires input.code.');
+            }
+            result = reviewExtensionRuntimeContract(input.code);
+            break;
         case 'theme_classes':
             result = buildExtensionThemeClasses(input);
             break;
@@ -1103,12 +1236,14 @@ export function buildExtensionUiSnippet(kind, input = {}) {
             }
             const uiReview = reviewExtensionUiContract(input.code);
             const themeReview = reviewExtensionThemeContract(input.code);
+            const runtimeReview = reviewExtensionRuntimeContract(input.code);
             result = {
-                action: 'extension_ui_and_theme_contract_reviewed',
-                valid: uiReview.valid && themeReview.valid,
-                issueCount: uiReview.issueCount + themeReview.issueCount,
+                action: 'extension_ui_theme_runtime_contract_reviewed',
+                valid: uiReview.valid && themeReview.valid && runtimeReview.valid,
+                issueCount: uiReview.issueCount + themeReview.issueCount + runtimeReview.issueCount,
                 ui: uiReview,
                 theme: themeReview,
+                runtime: runtimeReview,
             };
             break;
         default:
@@ -1167,19 +1302,15 @@ function getExtensionThemeContract() {
             'Use auto-injected components directly in the template with PascalCase names. Do not call resolveComponent() to manually resolve Nuxt UI/eApp components inside extension SFCs; it can compile but render unresolved lowercase DOM tags such as <ubutton>.',
             'Buttons should have stable geometry: hover may change color, border, or shadow but must not move the button or resize its content. Disabled buttons keep disabled cursor/visual state.',
             'Inputs and textareas should not add hover movement or decorative hover states; focus, invalid, disabled, and loading states must be explicit.',
-            'For drawers, modals, page shell headers/actions, permission gates, empty states, resource lists, form editors, widgets, menu/account panel registries, tabs, and upload modals, call build_extension_ui with the matching kind after extension acknowledgement before patching raw Vue.',
-            'Use build_extension_ui kind=theme_classes for theme classes by intent, and kind=theme_review or kind=review before saving generated snippets that include high-contract UI, theme classes, or native buttons.',
+            'For drawers, modals, page shell headers/actions, permission gates, empty states, resource lists, form editors, widgets, menu/account panel registries, tabs, upload modals, api_usage, notify, and runtime/theming reviews, call build_extension_ui with the matching kind after extension acknowledgement before patching raw Vue.',
+            'Use build_extension_ui kind=theme_classes for theme classes by intent, and kind=runtime_review, theme_review, or review before saving generated snippets that include composables, theme classes, high-contract UI, or native buttons.',
             'Extension validation rejects UInput, UTextarea, USelect, USelectMenu, UInputMenu, UInputNumber, UInputTags, UInputTime, and UInputDate without class="w-full" unless marked data-compact or data-inline.',
             'Use UBadge or token-backed badge spans for status. Keep badges legible in both themes with tokenized background, text, and border.',
         ],
         appComposables: [
-            'useApi(url, options) returns refs: data, error, pending, status, plus async execute(options?) and refresh(). execute returns the response object or null.',
-            'useApi does not auto-run; call execute() in onMounted, a watcher, or a user action.',
-            'Pass query/body as plain objects or computed objects. Do not JSON.stringify filter, deep, or aggregate in extension/app code.',
-            'Normal Enfyra list responses are available as data.value?.data, and the direct execute() response as response?.data. Avoid double-unwrapping data?.value?.data unless explicitly supporting an older nested response shape.',
-            'For mutations, set method in useApi options and call execute({ body }), execute({ id, body }), execute({ id }), or execute({ ids }) as appropriate.',
-            'Use errorContext for readable default failures. Return true from onError only when the component fully handles the error locally.',
-            'useNotify() provides async success/error/warning/info(title, description?) methods plus dismiss/clear. Do not use Nuxt toast object payloads with it.',
+            'Do not write useApi/useNotify shapes from memory. Use build_extension_ui kind=api_usage or kind=notify for known-good snippets.',
+            'Use build_extension_ui kind=runtime_review or kind=review before saving extension code that includes useApi, useNotify, getPackages, or package loading.',
+            'validate_extension_code and extension write tools reject static imports, useToast/useNotify.add misuse, JSON.stringify useApi options, and await useApi().',
         ],
         shellComponentContracts: {
             CommonDrawer: [
@@ -1400,7 +1531,12 @@ export function validateExtensionCodeLocally(code) {
     if (firstThemeError) {
         throw new Error(`Invalid extension theme contract: ${firstThemeError.message} Rule: ${firstThemeError.rule}. ${firstThemeError.suggestion}`);
     }
-    return { componentCasing: 'passed', fieldWidth: 'passed', themeContract: 'passed' };
+    const runtimeReview = reviewExtensionRuntimeContract(code);
+    const firstRuntimeError = runtimeReview.issues.find((issue) => issue.severity === 'error');
+    if (firstRuntimeError) {
+        throw new Error(`Invalid extension runtime contract: ${firstRuntimeError.message} Rule: ${firstRuntimeError.rule}. ${firstRuntimeError.suggestion}`);
+    }
+    return { componentCasing: 'passed', fieldWidth: 'passed', themeContract: 'passed', runtimeContract: 'passed' };
 }
 export async function validateExtensionCode(apiUrl, code, name) {
     const localChecks = validateExtensionCodeLocally(code);
@@ -2587,10 +2723,8 @@ async function runExtensionWorkflow(apiUrl, opts) {
         nextSteps: latestState.nextSteps,
         guidance: [
             'Call get_extension_theme_contract before generating or reviewing extension UI.',
-            'useApi returns refs { data, error, pending, status } plus execute/refresh; it does not auto-run. Pass query/body/filter/deep/aggregate as objects or computed objects, not JSON strings.',
-            'useNotify exposes success/error/warning/info(title, description?) async helpers; do not pass Nuxt toast object payloads to it.',
-            'For high-contract UI, call build_extension_ui after extension acknowledgement before patching raw Vue: drawer, modal, page shell, permission gate, empty state, resource list, form editor, widget, menu notification, account panel item, tabs, upload modal, theme classes, theme review, or full review.',
-            'Use build_extension_ui kind=theme_classes for theme classes by intent, and kind=theme_review or kind=review before saving generated snippets that include drawers, modals, fields, lists, tabs, upload modals, shell registry code, theme classes, or native buttons.',
+            'For high-contract UI/runtime code, call build_extension_ui after extension acknowledgement before patching raw Vue: drawer, modal, page shell, permission gate, empty state, resource list, form editor, widget, menu notification, account panel item, tabs, upload modal, api usage, notify, runtime review, theme classes, theme review, or full review.',
+            'Use build_extension_ui kind=api_usage, notify, theme_classes, runtime_review, theme_review, or review instead of hand-writing those contracts from memory.',
             'Extension validation rejects common field controls without class="w-full" unless intentionally marked data-compact or data-inline.',
             'PermissionGate renders the permitted slot directly and is UX-only; backend permissions and owner checks remain authoritative.',
             'For menu/account-panel notifications, use counts only when the signal source already owns an exact count; otherwise use a dot/chip for new attention.',
@@ -2700,7 +2834,7 @@ export function registerPlatformOperationTools(server, ENFYRA_API_URL) {
     server.tool('build_extension_ui', [
         'Lazy gateway for Enfyra admin extension UI builders.',
         'Use this after get_enfyra_required_knowledge(scope="extension") when a high-contract extension UI snippet is needed.',
-        'It keeps guided startup small by dispatching drawer, modal, page_shell, permission_gate, empty_state, resource_list, form_editor, widget, menu_notification, account_panel_item, tabs, upload_modal, theme_classes, theme_review, or review internally instead of exposing every builder tool up front.',
+        'It keeps guided startup small by dispatching drawer, modal, page_shell, permission_gate, empty_state, resource_list, form_editor, widget, menu_notification, account_panel_item, tabs, upload_modal, api_usage, notify, runtime_review, theme_classes, theme_review, or review internally instead of exposing every builder tool up front.',
     ].join(' '), {
         kind: z.enum([
             'drawer',
@@ -2715,11 +2849,14 @@ export function registerPlatformOperationTools(server, ENFYRA_API_URL) {
             'account_panel_item',
             'tabs',
             'upload_modal',
+            'api_usage',
+            'notify',
+            'runtime_review',
             'theme_classes',
             'theme_review',
             'review',
         ]).describe('Which extension UI contract builder/reviewer to run.'),
-        input: z.record(z.any()).optional().default({}).describe('Builder input object. For kind=theme_classes, pass { intent }. For kind=theme_review/review, pass { code }.'),
+        input: z.record(z.any()).optional().default({}).describe('Builder input object. For kind=api_usage, pass { path, resource, method? }. For kind=notify, pass { kind, title, description? }. For kind=theme_classes, pass { intent }. For kind=runtime_review/theme_review/review, pass { code }.'),
         extensionKnowledgeAckKey: extensionKnowledgeAckParam(z),
     }, async ({ kind, input, extensionKnowledgeAckKey }) => {
         assertExtensionKnowledgeAck(extensionKnowledgeAckKey);