@fluentcommerce/fluent-mcp-extn 0.7.0 → 0.7.3

package/dist/workflow-tools.js

@@ -1,9 +1,9 @@
 /**
- * Workflow management tools: workflow.upload, workflow.diff, workflow.simulate
+ * Workflow management tools: workflow_upload, workflow_diff, workflow_simulate
  *
  * Closes the deploy loop — agents can analyze, modify, and deploy
- * workflow JSON without falling back to CLI.
- * workflow.simulate adds lightweight static prediction for reasoning about
+ * workflow JSON via the Fluent REST API (PUT).
+ * workflow_simulate adds lightweight static prediction for reasoning about
  * event outcomes without live execution.
  */
 import { z } from "zod";
@@ -97,8 +97,8 @@ export const WorkflowSimulateInputSchema = z.object({
 // ---------------------------------------------------------------------------
 export const WORKFLOW_TOOL_DEFINITIONS = [
     {
-        name: "workflow.get",
-        description: "Fetch a workflow by entity type+subtype. Returns statuses, rulesets, rules, triggers. Use outputFile to save large JSON to disk. Works even when workflow.list returns 401.",
+        name: "workflow_get",
+        description: "Fetch a workflow by entity type+subtype. Returns statuses, rulesets, rules, triggers. Use outputFile to save large JSON to disk. Works even when workflow_list returns 401.",
         annotations: {
             title: "Get Workflow",
             readOnlyHint: true,
@@ -108,8 +108,8 @@ export const WORKFLOW_TOOL_DEFINITIONS = [
         },
     },
     {
-        name: "workflow.list",
-        description: "List all workflows for a retailer. Use outputDir to download all as JSON files. May return 401 on restricted accounts — use workflow.get instead.",
+        name: "workflow_list",
+        description: "List all workflows for a retailer. Use outputDir to download all as JSON files. May return 401 on restricted accounts — use workflow_get instead.",
         annotations: {
             title: "List Workflows",
             readOnlyHint: true,
@@ -119,8 +119,8 @@ export const WORKFLOW_TOOL_DEFINITIONS = [
         },
     },
     {
-        name: "workflow.upload",
-        description: "Deploy a workflow JSON to the Fluent environment. Validates structure before upload. Use dryRun=true to validate without deploying. Returns new version number.",
+        name: "workflow_upload",
+        description: "Deploy a workflow JSON to the Fluent environment via REST API (PUT). Validates structure before upload. Use dryRun=true to validate without deploying. Idempotent — deploying the same JSON twice does not create duplicate versions. WARNING: Does NOT update the CLI workflowlog — subsequent `fluent workflow download` may see stale data.",
         annotations: {
             title: "Upload Workflow",
             readOnlyHint: false,
@@ -130,7 +130,7 @@ export const WORKFLOW_TOOL_DEFINITIONS = [
         },
     },
     {
-        name: "workflow.diff",
+        name: "workflow_diff",
         description: "Compare two workflow JSONs locally. Shows ruleset/status/trigger changes with risk assessment. Formats: summary, detailed, mermaid.",
         annotations: {
             title: "Diff Workflows",
@@ -141,7 +141,7 @@ export const WORKFLOW_TOOL_DEFINITIONS = [
         },
     },
     {
-        name: "workflow.simulate",
+        name: "workflow_simulate",
         description: "Static prediction of event outcomes from workflow JSON (no API call). Finds matching rulesets, predicts state transitions, follow-on events, and webhooks. Cannot evaluate runtime conditions or custom rule logic.",
         annotations: {
             title: "Simulate Workflow",
@@ -397,7 +397,7 @@ function computeWorkflowDiff(base, target) {
 }
 function requireWorkflowClient(ctx) {
     if (!ctx.client) {
-        throw new ToolError("CONFIG_ERROR", "SDK client is not available. Run config.validate and fix auth/base URL.");
+        throw new ToolError("CONFIG_ERROR", "SDK client is not available. Run config_validate and fix auth/base URL.");
     }
     return ctx.client;
 }
@@ -618,8 +618,8 @@ function summarizeWorkflow(wf) {
             ...(customRuleRulesets.length > 0 ? { customRuleRulesets } : {}),
         },
         _hints: [
-            "Use workflow.simulate to predict event outcomes for any status.",
-            "Use workflow.diff to compare versions before uploading.",
+            "Use workflow_simulate to predict event outcomes for any status.",
+            "Use workflow_diff to compare versions before uploading.",
             ...(webhookRulesets.length > 0
                 ? [`${webhookRulesets.length} ruleset(s) trigger webhooks — check settings for endpoint config.`]
                 : []),
@@ -637,7 +637,8 @@ function writeWorkflowFile(filePath, workflow) {
     return Buffer.byteLength(fileContent, "utf-8");
 }
 /**
- * Handle workflow.upload tool call.
+ * Handle workflow_upload tool call.
+ * Deploys via REST API (PUT /api/v4.1/workflow/{retailerId}).
  */
 export async function handleWorkflowUpload(args, ctx) {
     const parsed = WorkflowUploadInputSchema.parse(args);
@@ -645,7 +646,7 @@ export async function handleWorkflowUpload(args, ctx) {
     // Resolve retailer ID
     const retailerId = parsed.retailerId ?? ctx.config.retailerId;
     if (!retailerId) {
-        throw new ToolError("VALIDATION_ERROR", "retailerId is required for workflow upload. Set FLUENT_RETAILER_ID or pass retailerId.");
+        throw new ToolError("VALIDATION_ERROR", "retailerId is required for workflow_upload. Set FLUENT_RETAILER_ID or pass retailerId.");
     }
     const preflight = await buildWorkflowUploadPreflight(wf, ctx, retailerId);
     // Validate if requested
@@ -684,23 +685,13 @@ export async function handleWorkflowUpload(args, ctx) {
             ...preflight,
         };
     }
-    // Upload via REST API POST /api/v4.1/workflow/{retailerId}
-    // This is the same endpoint the Fluent CLI uses.
-    // NOTE: For production deployments, prefer `fluent module install` via CLI
-    // which bundles workflows with settings, rules, and data in a versioned module.
-    const client = requireWorkflowClient(ctx);
-    // FluentClientAdapter may expose request() for custom REST endpoints
-    const clientAny = client;
-    if (typeof clientAny.request !== "function") {
-        throw new ToolError("CONFIG_ERROR", "SDK client does not expose request() method — cannot call REST workflow upload API. " +
-            "Use the Fluent CLI instead: fluent workflow merge <file> <name> -p <profile> -r <retailer>");
+    // Deploy via REST API (PUT)
+    const workflowName = wf.name ?? "";
+    if (!workflowName) {
+        throw new ToolError("VALIDATION_ERROR", "Workflow JSON must include a 'name' field (e.g. 'ORDER::HD').");
     }
-    const requestFn = clientAny.request;
-    const response = await requestFn(`/api/v4.1/workflow/${retailerId}`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: wf,
-    });
+    const client = requireWorkflowClient(ctx);
+    await client.uploadWorkflow(retailerId, wf);
     if (ctx.cache) {
         await ctx.cache.invalidate(`workflow:get:${retailerId}:${wf.name}:*`);
         await ctx.cache.invalidate(buildWorkflowListCacheKey(retailerId));
@@ -708,20 +699,19 @@ export async function handleWorkflowUpload(args, ctx) {
     return {
         ok: true,
         uploaded: true,
-        workflowName: wf.name,
+        workflowName,
         retailerId,
-        response,
+        deployMethod: "rest-put",
         ...preflight,
         _hints: [
-            "REST/MCP uploads do NOT update the CLI workflowlog cache. Run 'fluent workflowlog delete' if you later use CLI workflow commands.",
-            "Use workflow.diff to compare old vs new before uploading.",
-            "Use workflow.simulate to verify event outcomes after uploading.",
-            "For production deployments, prefer 'fluent module install' via CLI for versioned, bundled deployments.",
+            "Deployed via REST API (PUT). The CLI workflowlog is NOT updated — run `fluent workflowlog delete` then redeploy via CLI if you need CLI consistency.",
+            "Use workflow_diff to compare old vs new before uploading.",
+            "Use workflow_simulate to verify event outcomes after uploading.",
         ],
     };
 }
 /**
- * Handle workflow.diff tool call.
+ * Handle workflow_diff tool call.
  * Pure computation — no API calls.
  */
 export async function handleWorkflowDiff(args, _ctx) {
@@ -873,7 +863,7 @@ function simulateWorkflow(wf, currentStatus, eventName, entityType, entitySubtyp
     return matches;
 }
 /**
- * Handle workflow.simulate tool call.
+ * Handle workflow_simulate tool call.
  * Pure computation — no API calls.
  */
 export async function handleWorkflowSimulate(args, _ctx) {
@@ -891,7 +881,7 @@ export async function handleWorkflowSimulate(args, _ctx) {
     if (hasCustomRules) {
         limitations.push(`${allCustomRules.length} custom rule(s) found whose behavior cannot be predicted statically: ${allCustomRules.join(", ")}.`);
     }
-    limitations.push("Use workflow.transitions for AUTHORITATIVE live validation of available actions.");
+    limitations.push("Use workflow_transitions for AUTHORITATIVE live validation of available actions.");
     return {
         ok: true,
         workflowName: wf.name ?? "unknown",
@@ -927,7 +917,7 @@ export async function handleWorkflowSimulate(args, _ctx) {
     };
 }
 /**
- * Handle workflow.get tool call.
+ * Handle workflow_get tool call.
  * Fetches a specific workflow by entityType::entitySubtype via REST API.
  */
 export async function handleWorkflowGet(args, ctx) {
@@ -1018,7 +1008,7 @@ export async function handleWorkflowGet(args, ctx) {
     };
 }
 /**
- * Handle workflow.list tool call.
+ * Handle workflow_list tool call.
  * Lists all workflows for a retailer via REST API.
  */
 export async function handleWorkflowList(args, ctx) {
@@ -1147,7 +1137,7 @@ export async function handleWorkflowList(args, ctx) {
         workflows: latest,
         ...(cacheMeta ? { _cache: cacheMeta } : {}),
         note: workflows.length === 0
-            ? "No workflows found. The list endpoint may return 401 on some accounts — try workflow.get with a specific entityType and entitySubtype instead."
+            ? "No workflows found. The list endpoint may return 401 on some accounts — try workflow_get with a specific entityType and entitySubtype instead."
             : undefined,
     };
 }

package/docs/E2E_TESTING.md

@@ -9,7 +9,7 @@ real Fluent API operations.
 |--------|------|---------|
 | `e2e-smoke.ts` | E2E | Full MCP smoke cycle: tool discovery, config, health, events, GraphQL |
 | `e2e-negative.ts` | E2E | Validation error and malformed input handling |
-| `e2e-profile-test.mjs` | E2E | Quick FLUENT_PROFILE integration check |
+| `e2e-profile-test_mjs` | E2E | Quick FLUENT_PROFILE integration check |
 | `e2e-full-order.ts` | E2E | Single order lifecycle: create, validate, fulfil, ship, deliver |
 | `e2e-full-multi.ts` | E2E | ORDER::MULTI lifecycle with discovery and fulfilment event sequence |
 | `e2e-agentic.ts` | E2E | All 11 agentic tools: entity CRUD, workflow, settings, environment |
@@ -26,16 +26,16 @@ All scripts require a built server (`npm run build`) and valid Fluent credential
   - `npm run build`
   - `npm test`
 - **Level 2: MCP runtime check** (server starts, tools load)
-  - `config.validate`
-  - `health.ping`
-  - `connection.test`
+  - `config_validate`
+  - `health_ping`
+  - `connection_test`
 - **Level 3: Fluent API smoke** (real API calls)
-  - `event.send` dry-run and real send
-  - `event.get` on sent event ID
-  - `graphql.query`
-  - `graphql.queryAll` (pagination timeout + aggregation)
-  - optional batch flow (`batch.create` -> `batch.send` -> `batch.status`)
-  - optional webhook verification (`webhook.validate` with `rawBody`)
+  - `event_send` dry-run and real send
+  - `event_get` on sent event ID
+  - `graphql_query`
+  - `graphql_queryAll` (pagination timeout + aggregation)
+  - optional batch flow (`batch_create` -> `batch_send` -> `batch_status`)
+  - optional webhook verification (`webhook_validate` with `rawBody`)
 
 ## 2) Prerequisites
 
@@ -148,9 +148,9 @@ only when non-skipped steps fail.
 
 Full MCP client smoke cycle that exercises the core tool chain end to end.
 
-**What it tests:** tool discovery, `config.validate`, `health.ping`, `event.build`,
-`event.send` (dry-run and real), `graphql.query`, `graphql.queryAll`, order lookup,
-`event.get` by ID.
+**What it tests:** tool discovery, `config_validate`, `health_ping`, `event_build`,
+`event_send` (dry-run and real), `graphql_query`, `graphql_queryAll`, order lookup,
+`event_get` by ID.
 
 **How to run:**
 
@@ -171,11 +171,11 @@ npm run e2e:smoke -- --skip-real-send
 Validates that the server returns correct error envelopes for invalid inputs.
 
 **What it tests:**
-- `event.send` with missing required `entityRef` field
-- `graphql.query` with malformed GraphQL syntax
-- `event.get` with a nonexistent event ID
-- `graphql.introspect` with a nonexistent mutation name
-- `webhook.validate` with an invalid signature and public key
+- `event_send` with missing required `entityRef` field
+- `graphql_query` with malformed GraphQL syntax
+- `event_get` with a nonexistent event ID
+- `graphql_introspect` with a nonexistent mutation name
+- `webhook_validate` with an invalid signature and public key
 
 Each test case asserts: `ok: false`, standard error envelope shape
 (`code` + `message` + `retryable`), and expected error code where applicable
@@ -193,7 +193,7 @@ npx tsx scripts/e2e-negative.ts --profile YOUR_PROFILE --retailer YOUR_RETAILER
 
 ---
 
-### `e2e-profile-test.mjs`
+### `e2e-profile-test_mjs`
 
 Minimal FLUENT_PROFILE integration check. Loads config, creates SDK client, and
 runs four quick API calls to verify profile-based auth works end to end.
@@ -208,7 +208,7 @@ runs four quick API calls to verify profile-based auth works end to end.
 **How to run:**
 
 ```bash
-FLUENT_PROFILE=YOUR_PROFILE FLUENT_PROFILE_RETAILER=YOUR_RETAILER node scripts/e2e-profile-test.mjs
+FLUENT_PROFILE=YOUR_PROFILE FLUENT_PROFILE_RETAILER=YOUR_RETAILER node scripts/e2e-profile-test_mjs
 ```
 
 **Environment:** requires `FLUENT_PROFILE` and optionally `FLUENT_PROFILE_RETAILER`
@@ -255,7 +255,7 @@ MULTI order type workflow and includes workflow transition discovery.
 **What it tests:**
 1. Config validation
 2. Discovery: retailer, locations, catalogues, products, customers, settings
-3. `workflow.transitions` for ORDER::MULTI at ON_VALIDATION status
+3. `workflow_transitions` for ORDER::MULTI at ON_VALIDATION status
 4. `createOrder` mutation with MULTI type
 5. `ConfirmValidation` event
 6. Fulfilment creation verification
@@ -269,7 +269,7 @@ MULTI order type workflow and includes workflow transition discovery.
 npx tsx scripts/e2e-full-multi.ts
 ```
 
-**Environment:** defaults to `FLUENT_BASE_URL=https://<account>.test.api.fluentretail.com`
+**Environment:** defaults to `FLUENT_BASE_URL=https://<account>.test_api.fluentretail.com`
 and `FLUENT_RETAILER_ID=2`. Override with env vars. Requires OAuth or profile
 credentials.
 
@@ -282,16 +282,16 @@ credentials.
 Comprehensive smoke test for all 11 agentic tools against a live environment.
 
 **What it tests:**
-- `environment.discover` (retailer + locations, catalogues)
-- `environment.validate` (auth, retailer, locations checks)
-- `entity.create` (dryRun validation, required field rejection, live creation)
-- `entity.get` (by ID, by ref, nonexistent ref)
-- `entity.update` (attribute update)
-- `test.assert` (status match, status mismatch)
-- `setting.upsert` (create new, update existing with previous value)
-- `workflow.diff` (summary format, mermaid format)
-- `workflow.simulate` (status matching, custom rule confidence, no-match)
-- `workflow.upload` (dryRun structure validation)
+- `environment_discover` (retailer + locations, catalogues)
+- `environment_validate` (auth, retailer, locations checks)
+- `entity_create` (dryRun validation, required field rejection, live creation)
+- `entity_get` (by ID, by ref, nonexistent ref)
+- `entity_update` (attribute update)
+- `test_assert` (status match, status mismatch)
+- `setting_upsert` (create new, update existing with previous value)
+- `workflow_diff` (summary format, mermaid format)
+- `workflow_simulate` (status matching, custom rule confidence, no-match)
+- `workflow_upload` (dryRun structure validation)
 
 **How to run:**
 
@@ -312,10 +312,10 @@ Proves that response shaping (auto-summarization) works correctly on real API
 responses.
 
 **What it proves:**
-1. `event.flowInspect` compact response stays within budget (50k chars)
-2. `event.flowInspect` full mode (`compact: false`) gets auto-summarized, not truncated
-3. `plugin.list` (unfiltered, 500+ rules) gets shaped when large
-4. `event.list` (500 events) gets shaped when large
+1. `event_flowInspect` compact response stays within budget (50k chars)
+2. `event_flowInspect` full mode (`compact: false`) gets auto-summarized, not truncated
+3. `plugin_list` (unfiltered, 500+ rules) gets shaped when large
+4. `event_list` (500 events) gets shaped when large
 5. `_responseMeta` appears with accurate stats (originalChars, shapedChars, reductionPercent)
 6. No `_truncated` markers anywhere (replaced by `_summarized`)
 
@@ -333,9 +333,9 @@ budget threshold.
 
 ### `run-flow-inspect.ts`
 
-Advanced FlowInspect forensics runner. Calls `event.flowInspect`, then performs
+Advanced FlowInspect forensics runner. Calls `event_flowInspect`, then performs
 local analysis: risk scoring, finding extraction, evidence ranking, and optional
-per-event drilldowns via `event.get`.
+per-event drilldowns via `event_get`.
 
 **Outputs:**
 - Raw JSON: full flowInspect response
@@ -440,7 +440,7 @@ npx tsx scripts/check-event-status.ts --event-name ConfirmValidation --entity-re
 
 Run these tools in order from the assistant:
 
-### Step 1: `config.validate`
+### Step 1: `config_validate`
 
 Request:
 
@@ -454,7 +454,7 @@ Expected:
 - `validation.isReadyForApiCalls: true`
 - no blocking errors
 
-### Step 2: `health.ping`
+### Step 2: `health_ping`
 
 Request:
 
@@ -468,7 +468,7 @@ Expected:
 - `sdkClient: "connected"` (or equivalent ready status)
 - config summary present without secret values
 
-### Step 3: `connection.test`
+### Step 3: `connection_test`
 
 Request:
 
@@ -482,7 +482,7 @@ Expected:
 - `details` includes user, retailer, and location info
 - confirms end-to-end GraphQL connectivity
 
-### Step 4: `event.build`
+### Step 4: `event_build`
 
 Request:
 
@@ -504,7 +504,7 @@ Expected:
 - complete event payload returned
 - defaults applied (`rootEntityType`, `source`, `type`)
 
-### Step 5: `event.send` dry-run
+### Step 5: `event_send` dry-run
 
 Request:
 
@@ -524,7 +524,7 @@ Expected:
 - `dryRun: true`
 - no API call made
 
-### Step 6: `event.send` real call
+### Step 6: `event_send` real call
 
 Request:
 
@@ -553,7 +553,7 @@ Expected:
 
 If this fails, investigate before resubmitting to avoid duplicate side effects.
 
-### Step 7: `graphql.query` verification
+### Step 7: `graphql_query` verification
 
 Use a query valid for your schema. Example shape:
 
@@ -573,7 +573,7 @@ Expected:
 
 > Note: exact query fields differ by tenant schema/version.
 
-### Step 8: `graphql.queryAll` verification
+### Step 8: `graphql_queryAll` verification
 
 Validate auto-pagination and run-level timeout behavior:
 
@@ -591,9 +591,9 @@ Expected:
 - `response.extensions.autoPagination` present
 - `pagination.totalPages` / `pagination.totalRecords` present in tool response
 
-### Step 9: `event.get` verification
+### Step 9: `event_get` verification
 
-Use an event ID from successful `event.send` (or resolve ID via `event.list`).
+Use an event ID from successful `event_send` (or resolve ID via `event_list`).
 
 ```json
 {
@@ -607,7 +607,7 @@ Expected:
 - event payload returned from Event API
 - event payload includes expected `name`, `context.entityRef`, and retailer
 
-If `event.send` response does not contain `id`, resolve it first with `event.list`:
+If `event_send` response does not contain `id`, resolve it first with `event_list`:
 
 ```json
 {
@@ -619,7 +619,7 @@ If `event.send` response does not contain `id`, resolve it first with `event.lis
 }
 ```
 
-### Step 10 (optional): `graphql.introspect`
+### Step 10 (optional): `graphql_introspect`
 
 Verify schema introspection access:
 
@@ -659,7 +659,7 @@ Expected:
 
 ## 8) Optional batch E2E
 
-### `batch.create`
+### `batch_create`
 
 ```json
 {
@@ -669,7 +669,7 @@ Expected:
 }
 ```
 
-### `batch.send`
+### `batch_send`
 
 ```json
 {
@@ -690,7 +690,7 @@ Expected:
 }
 ```
 
-### `batch.status`
+### `batch_status`
 
 ```json
 {
@@ -700,7 +700,7 @@ Expected:
 
 ## 9) Failure triage quick map
 
-- `CONFIG_ERROR`: missing env values -> run `config.validate`
+- `CONFIG_ERROR`: missing env values -> run `config_validate`
 - `AUTH_ERROR`: invalid creds/token -> verify OAuth or `TOKEN_COMMAND`
 - `VALIDATION_ERROR`: invalid input shape -> fix request payload
 - `TIMEOUT_ERROR` / `NETWORK_ERROR`: tune timeout/retry; verify connectivity
@@ -712,11 +712,11 @@ Mark E2E successful only when:
 
 - local build/test passed
 - config/health/connection tools are green
-- at least one real `event.send` succeeded
-- at least one `event.get` succeeded
-- at least one real `graphql.query` succeeded
-- at least one `graphql.queryAll` run succeeded
-- (optional) `graphql.introspect` schema access confirmed
+- at least one real `event_send` succeeded
+- at least one `event_get` succeeded
+- at least one real `graphql_query` succeeded
+- at least one `graphql_queryAll` run succeeded
+- (optional) `graphql_introspect` schema access confirmed
 - (optional) batch cycle completed
 
 ## 11) CI-triggered smoke (GitHub Actions)

package/docs/HANDOVER_GITHUB_COPILOT.md

@@ -54,14 +54,14 @@ Copy `fluent-mcp-extn/docs/HANDOVER_VSCODE_MCP_JSON.example.json` to `.vscode/mc
 
 6) Verify in Copilot chat (agent mode), run:
 
-1. `config.validate`
-2. `health.ping`
-3. `graphql.query` with `query { __typename }`
+1. `config_validate`
+2. `health_ping`
+3. `graphql_query` with `query { __typename }`
 
 Expected minimum:
 
-- `config.validate` returns `ok: true`
-- `health.ping` returns `status: "ok"`
+- `config_validate` returns `ok: true`
+- `health_ping` returns `status: "ok"`
 - GraphQL test returns data without auth/config errors
 
 If these pass, local setup is complete.
@@ -70,7 +70,7 @@ Operational behavior to know:
 
 - read operations use retry/backoff for transient failures
 - non-idempotent write operations do not auto-retry
-- `graphql.query` disables retries automatically when the request is a mutation
+- `graphql_query` disables retries automatically when the request is a mutation
 
 ### Updating after code changes
 
@@ -120,7 +120,7 @@ This configuration uses `type: "local"` and explicitly allowlists tools.
 
 - trigger an agent task in the repository
 - open session logs and confirm MCP server start step succeeds
-- confirm tools are discovered (for example `config.validate`, `graphql.query`)
+- confirm tools are discovered (for example `config_validate`, `graphql_query`)
 
 ### Updating after code changes
 
@@ -128,7 +128,7 @@ The `copilot-setup-steps.yml` workflow runs `npm ci && npm run build` automatica
 
 ## Synchronous fulfilment options support
 
-`graphql.query` supports live checkout-style synchronous fulfilment options calls, for example:
+`graphql_query` supports live checkout-style synchronous fulfilment options calls, for example:
 
 - `createFulfilmentOption(..., executionMode: AWAIT_ORCHESTRATION)`
 
@@ -148,7 +148,7 @@ Important runtime requirement:
 - `Workflow [FULFILMENT_OPTIONS::<type>] not found`
   - deploy matching fulfilment options workflow for the selected retailer/type
 - webhook signature mismatch
-  - provide exact `rawBody` to `webhook.validate` (signature checks are byte-sensitive)
+  - provide exact `rawBody` to `webhook_validate` (signature checks are byte-sensitive)
 
 ## Security notes
 

package/docs/HANDOVER_GITHUB_REPO_MCP_CONFIG.example.json

@@ -5,18 +5,18 @@
       "command": "node",
       "args": ["fluent-mcp-extn/dist/index.js"],
       "tools": [
-        "config.validate",
-        "health.ping",
-        "event.build",
-        "event.send",
-        "event.get",
-        "event.list",
-        "graphql.query",
-        "batch.create",
-        "batch.send",
-        "batch.status",
-        "batch.batchStatus",
-        "batch.results"
+        "config_validate",
+        "health_ping",
+        "event_build",
+        "event_send",
+        "event_get",
+        "event_list",
+        "graphql_query",
+        "batch_create",
+        "batch_send",
+        "batch_status",
+        "batch_batchStatus",
+        "batch_results"
       ],
       "env": {
         "FLUENT_BASE_URL": "COPILOT_MCP_FLUENT_BASE_URL",