@harperfast/harper 5.0.30 → 5.1.0-beta.2

package/dist/components/mcp/tools/schemas/derive.js

@@ -0,0 +1,291 @@
+"use strict";
+/**
+ * Derive MCP tool input schemas from a Harper Resource's `Table.attributes`.
+ *
+ * Harper attribute types map to JSON Schema's primitive types; nested
+ * `properties[]` and array `elements` map recursively. `attribute_permissions`
+ * (per role, per table) narrows the schema by removing attributes the user
+ * can't read (for `get_*`/`search_*`) or write (for `create_*`/`update_*`).
+ *
+ * Runtime enforcement still happens in `Table.allowUpdate` /
+ * `Table.allowCreate` — the schema narrowing here is a UX layer (so the LLM
+ * doesn't waste tokens on fields it can't write), NOT a security boundary.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveGetSchema = deriveGetSchema;
+exports.deriveSearchSchema = deriveSearchSchema;
+exports.deriveCreateSchema = deriveCreateSchema;
+exports.deriveUpdateSchema = deriveUpdateSchema;
+exports.deriveDeleteSchema = deriveDeleteSchema;
+exports.deriveGetOutputSchema = deriveGetOutputSchema;
+exports.deriveCreateOutputSchema = deriveCreateOutputSchema;
+exports.deriveUpdateOutputSchema = deriveUpdateOutputSchema;
+exports.derivePatchOutputSchema = derivePatchOutputSchema;
+exports.deriveDeleteOutputSchema = deriveDeleteOutputSchema;
+/**
+ * Maps a Harper attribute type to a JSON Schema `type` value (or list of
+ * types when nullable). Falls back to "string" for unknown types — better
+ * than blocking the field entirely; the runtime will validate.
+ */
+function harperTypeToJsonSchema(type) {
+    switch (type) {
+        case 'Int':
+        case 'Long':
+        case 'BigInt':
+            return { type: 'integer' };
+        case 'Float':
+            return { type: 'number' };
+        case 'Boolean':
+            return { type: 'boolean' };
+        case 'String':
+        case 'ID':
+            return { type: 'string' };
+        case 'Date':
+            // Harper Date may be ISO string or number; allow both for LLM flexibility.
+            return { type: ['string', 'number'], description: 'ISO 8601 timestamp or epoch milliseconds.' };
+        case 'Bytes':
+        case 'Blob':
+            return { type: 'string', contentEncoding: 'base64' };
+        case 'Any':
+        case undefined:
+            return {};
+        default:
+            return { type: 'string' };
+    }
+}
+function attributeToProperty(attr) {
+    let base;
+    if (attr.type === 'Object' && attr.properties) {
+        base = {
+            type: 'object',
+            properties: Object.fromEntries(attr.properties.map((p) => [p.name, attributeToProperty(p)])),
+        };
+    }
+    else if (attr.type === 'Array' && attr.elements) {
+        base = {
+            type: 'array',
+            items: attributeToProperty(attr.elements),
+        };
+    }
+    else {
+        base = harperTypeToJsonSchema(attr.type);
+    }
+    if (attr.nullable && 'type' in base) {
+        const t = base.type;
+        const types = Array.isArray(t) ? t : [t];
+        if (!types.includes('null')) {
+            base.type = [...types, 'null'];
+        }
+    }
+    if (attr.description && !base.description) {
+        base.description = attr.description;
+    }
+    return base;
+}
+/**
+ * `true` if the user has the requested mode (read/insert/update) on this
+ * attribute. When no per-attribute permissions exist, returns true (the
+ * table-level perm gates the call already).
+ */
+function attributeAllowed(attributeName, permissions, mode) {
+    if (!permissions || permissions.length === 0)
+        return true;
+    const match = permissions.find((p) => p.attribute_name === attributeName);
+    if (!match)
+        return false; // explicit list with no entry → denied
+    return match[mode] !== false;
+}
+/**
+ * Composed visibility: an attribute is visible when it is NOT @hidden AND the
+ * caller is allowed under attribute_permissions for the requested mode. The
+ * `@hidden` directive is a metadata-visibility signal — it suppresses the
+ * attribute from MCP descriptors and OpenAPI emit. RBAC remains the
+ * enforcement mechanism for data access.
+ */
+function attributeVisible(attr, permissions, mode) {
+    if (attr.hidden)
+        return false;
+    return attributeAllowed(attr.name, permissions, mode);
+}
+/**
+ * Build a JSON Schema object covering some subset of the table's attributes.
+ * `mode` controls how attribute_permissions are interpreted; `include`
+ * optionally limits to a subset (e.g. primary-key-only for `delete_*`).
+ */
+function buildPropertiesObject(attributes, permissions, mode, include) {
+    const properties = {};
+    const required = [];
+    for (const attr of attributes) {
+        if (include && !include(attr))
+            continue;
+        if (!attributeVisible(attr, permissions, mode))
+            continue;
+        // Skip auto-managed columns from write inputs — Harper assigns them.
+        if (mode !== 'read' && (attr.assignCreatedTime || attr.assignUpdatedTime || attr.expiresAt))
+            continue;
+        if (mode !== 'read' && (attr.computed !== undefined || attr.computedFromExpression !== undefined))
+            continue;
+        properties[attr.name] = attributeToProperty(attr);
+        if (mode === 'insert' && !attr.nullable && !attr.isPrimaryKey) {
+            required.push(attr.name);
+        }
+    }
+    return { properties, required };
+}
+function findPrimaryKey(attributes) {
+    return attributes.find((a) => a.isPrimaryKey);
+}
+function deriveGetSchema(attributes, _permissions) {
+    const pk = findPrimaryKey(attributes);
+    const pkSchema = pk ? attributeToProperty(pk) : { type: 'string' };
+    return {
+        type: 'object',
+        properties: {
+            id: { ...pkSchema, description: pk ? `Primary key (${pk.name}).` : 'Primary key.' },
+            get_attributes: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Attribute names to project; defaults to all readable attributes.',
+            },
+        },
+        required: ['id'],
+    };
+}
+function deriveSearchSchema(attributes, permissions) {
+    // `conditions` is freeform — Harper supports many comparators; we expose
+    // the common subset and rely on server-side validation for the rest.
+    const readableAttrs = attributes.filter((a) => attributeVisible(a, permissions, 'read'));
+    const attrNames = readableAttrs.map((a) => a.name);
+    return {
+        type: 'object',
+        properties: {
+            conditions: {
+                type: 'array',
+                items: {
+                    type: 'object',
+                    properties: {
+                        attribute: {
+                            type: 'string',
+                            ...(attrNames.length > 0 ? { enum: attrNames } : {}),
+                            description: 'Attribute name to filter on.',
+                        },
+                        comparator: {
+                            type: 'string',
+                            enum: [
+                                'equals',
+                                'not_equals',
+                                'contains',
+                                'starts_with',
+                                'ends_with',
+                                'greater_than',
+                                'less_than',
+                                'greater_than_equal',
+                                'less_than_equal',
+                                'between',
+                            ],
+                            description: 'Comparison operator. Defaults to "equals" if omitted.',
+                        },
+                        value: { description: 'Comparison value (any JSON type).' },
+                    },
+                    required: ['attribute', 'value'],
+                },
+            },
+            operator: { type: 'string', enum: ['and', 'or'], description: 'How to combine conditions; defaults to "and".' },
+            get_attributes: { type: 'array', items: { type: 'string' } },
+            limit: { type: 'integer', minimum: 1, description: 'Max records to return on this page.' },
+            cursor: { type: 'string', description: 'Opaque pagination cursor returned by a previous call.' },
+        },
+    };
+}
+function deriveCreateSchema(attributes, permissions) {
+    const { properties, required } = buildPropertiesObject(attributes, permissions, 'insert');
+    const schema = {
+        type: 'object',
+        properties,
+    };
+    if (required.length > 0)
+        schema.required = required;
+    return schema;
+}
+function deriveUpdateSchema(attributes, permissions) {
+    const pk = findPrimaryKey(attributes);
+    const { properties } = buildPropertiesObject(attributes, permissions, 'update', (a) => !a.isPrimaryKey);
+    return {
+        type: 'object',
+        properties: {
+            id: pk
+                ? { ...attributeToProperty(pk), description: `Primary key (${pk.name}). Required.` }
+                : { type: 'string', description: 'Primary key. Required.' },
+            ...properties,
+        },
+        required: ['id'],
+    };
+}
+function deriveDeleteSchema(attributes, _permissions) {
+    const pk = findPrimaryKey(attributes);
+    return {
+        type: 'object',
+        properties: {
+            id: pk
+                ? { ...attributeToProperty(pk), description: `Primary key (${pk.name}).` }
+                : { type: 'string', description: 'Primary key.' },
+        },
+        required: ['id'],
+    };
+}
+/**
+ * Full record shape — every visible attribute as it appears in returned records.
+ * Used as the outputSchema for get/create/update/patch. Reflects what the
+ * server returns, not what the client sends: server-assigned fields
+ * (@createdTime, @updatedTime, @primaryKey) appear as required in output even
+ * though they're optional on input.
+ *
+ * `search_*` deliberately omits outputSchema — envelope shape (records vs
+ * data, cursor vs nextCursor) is tracked in the sibling issue.
+ */
+function deriveRecordSchema(attributes, permissions) {
+    const properties = {};
+    const required = [];
+    for (const attr of attributes) {
+        if (!attributeVisible(attr, permissions, 'read'))
+            continue;
+        properties[attr.name] = attributeToProperty(attr);
+        const requiredOnOutput = attr.nullable === false || attr.assignCreatedTime || attr.assignUpdatedTime || attr.isPrimaryKey;
+        if (requiredOnOutput)
+            required.push(attr.name);
+    }
+    const schema = {
+        type: 'object',
+        properties,
+        additionalProperties: false,
+    };
+    if (required.length > 0)
+        schema.required = required;
+    return schema;
+}
+function deriveGetOutputSchema(attributes, permissions) {
+    return deriveRecordSchema(attributes, permissions);
+}
+function deriveCreateOutputSchema(attributes, permissions) {
+    return deriveRecordSchema(attributes, permissions);
+}
+function deriveUpdateOutputSchema(attributes, permissions) {
+    return deriveRecordSchema(attributes, permissions);
+}
+function derivePatchOutputSchema(attributes, permissions) {
+    return deriveRecordSchema(attributes, permissions);
+}
+/**
+ * Output schema for delete responses. Table.delete returns Promise<boolean>;
+ * makeDeleteHandler wraps it as wrapResult(data ?? { ok: true }) — so on
+ * success the MCP response carries a text content of "true" with no
+ * structuredContent. Advertise the actual contract (boolean) rather than a
+ * synthesized object envelope the handler never produces.
+ */
+function deriveDeleteOutputSchema(_attributes) {
+    return {
+        type: 'boolean',
+        description: 'True when the record was deleted; false when no record matched the primary key.',
+    };
+}
+//# sourceMappingURL=derive.js.map

package/dist/components/mcp/tools/schemas/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../../../../components/mcp/tools/schemas/derive.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAsJH,0CAkBC;AAED,gDAgDC;AAED,gDAWC;AAED,gDAgBC;AAED,gDAcC;AAuCD,sDAKC;AAED,4DAKC;AAED,4DAKC;AAED,0DAKC;AASD,4DAKC;AA7TD;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,IAAwB;IACvD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5B,KAAK,OAAO;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,SAAS;YACb,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5B,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACR,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM;YACV,2EAA2E;YAC3E,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QACjG,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACV,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;QACtD,KAAK,KAAK,CAAC;QACX,KAAK,SAAS;YACb,OAAO,EAAE,CAAC;QACX;YACC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAqB;IACjD,IAAI,IAAgF,CAAC;IACrF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/C,IAAI,GAAG;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC5F,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnD,IAAI,GAAG;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;SACzC,CAAC;IACH,CAAC;SAAM,CAAC;QACP,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAgB,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CACxB,aAAqB,EACrB,WAAmD,EACnD,IAAU;IAEV,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,aAAa,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,uCAAuC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACxB,IAAqB,EACrB,WAAmD,EACnD,IAAU;IAEV,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC7B,UAA6B,EAC7B,WAAmD,EACnD,IAAU,EACV,OAAyC;IAEzC,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC;YAAE,SAAS;QACzD,qEAAqE;QACrE,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QACtG,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,CAAC;YAAE,SAAS;QAC5G,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,UAA6B;IACpD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,eAAe,CAC9B,UAA6B,EAC7B,YAAoD;IAEpD,MAAM,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnE,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;YACnF,cAAc,EAAE;gBACf,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,kEAAkE;aAC/E;SACD;QACD,QAAQ,EAAE,CAAC,IAAI,CAAC;KAChB,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CACjC,UAA6B,EAC7B,WAAmD;IAEnD,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,UAAU,EAAE;gBACX,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACX,SAAS,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACpD,WAAW,EAAE,8BAA8B;yBAC3C;wBACD,UAAU,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE;gCACL,QAAQ;gCACR,YAAY;gCACZ,UAAU;gCACV,aAAa;gCACb,WAAW;gCACX,cAAc;gCACd,WAAW;gCACX,oBAAoB;gCACpB,iBAAiB;gCACjB,SAAS;6BACT;4BACD,WAAW,EAAE,uDAAuD;yBACpE;wBACD,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE;qBAC3D;oBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;iBAChC;aACD;YACD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE;YAC/G,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC5D,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC1F,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;SAChG;KACD,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CACjC,UAA6B,EAC7B,WAAmD;IAEnD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1F,MAAM,MAAM,GAA8E;QACzF,IAAI,EAAE,QAAQ;QACd,UAAU;KACV,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACpD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,kBAAkB,CACjC,UAA6B,EAC7B,WAAmD;IAEnD,MAAM,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,EAAE,UAAU,EAAE,GAAG,qBAAqB,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACxG,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,EAAE,EAAE,EAAE;gBACL,CAAC,CAAC,EAAE,GAAG,mBAAmB,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,IAAI,cAAc,EAAE;gBACpF,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;YAC5D,GAAG,UAAU;SACb;QACD,QAAQ,EAAE,CAAC,IAAI,CAAC;KAChB,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CACjC,UAA6B,EAC7B,YAAoD;IAEpD,MAAM,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,EAAE,EAAE,EAAE;gBACL,CAAC,CAAC,EAAE,GAAG,mBAAmB,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,IAAI,IAAI,EAAE;gBAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;SAClD;QACD,QAAQ,EAAE,CAAC,IAAI,CAAC;KAChB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAC1B,UAA6B,EAC7B,WAAmD;IAEnD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC;YAAE,SAAS;QAC3D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,gBAAgB,GACrB,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,YAAY,CAAC;QAClG,IAAI,gBAAgB;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAKR;QACH,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,oBAAoB,EAAE,KAAK;KAC3B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACpD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,qBAAqB,CACpC,UAA6B,EAC7B,WAAmD;IAEnD,OAAO,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,wBAAwB,CACvC,UAA6B,EAC7B,WAAmD;IAEnD,OAAO,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,wBAAwB,CACvC,UAA6B,EAC7B,WAAmD;IAEnD,OAAO,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,uBAAuB,CACtC,UAA6B,EAC7B,WAAmD;IAEnD,OAAO,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,WAA8B;IACtE,OAAO;QACN,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,iFAAiF;KAC9F,CAAC;AACH,CAAC"}

package/dist/components/mcp/tools/schemas/operationDescriptions.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Hand-authored MCP tool descriptions for Harper operations.
+ *
+ * Authoring process: each entry was authored by reading the corresponding
+ * handler implementation in `OPERATION_FUNCTION_MAP` — its leading JSDoc,
+ * its actual behavior (mutations, side effects, RBAC, hazards), and its
+ * relationship to sibling operations — and writing a short, verb-led
+ * sentence grounded in that code. The path:line citation above each entry
+ * points to the handler's declaration so reviewers can verify in one click.
+ *
+ * Authoring rubric:
+ *   1. Verb-led sentence: "Creates …", "Returns …", "Restarts …", "Lists …".
+ *   2. Disambiguate from siblings when useful (e.g. search_by_id vs
+ *      search_jobs_by_start_date). The LLM uses these to choose tools.
+ *   3. One cost/hazard sentence for heavy or destructive calls.
+ *   4. ≤ 400 chars per entry. Long descriptions waste context and get
+ *      truncated by some MCP clients.
+ *   5. No PR/issue references in descriptions — they're shown to LLMs at
+ *      tool-selection time, not consumed by human reviewers.
+ *
+ * Coverage target: every operation matching the v1 DEFAULT_ALLOW glob
+ * expansion, plus every destructive operation an operator might opt into
+ * via `mcp.operations.allow`. Out-of-core operations (e.g. harper-pro's
+ * `cluster_status`) cannot have entries here — their authoritative
+ * description belongs alongside their implementation.
+ *
+ * Transitional status: this catalog is the in-core fill until #878
+ * (introspectable operations registry) ships, at which point each
+ * operation's description lives with its schema and its handler in one
+ * place and this file is retired.
+ */
+export declare const OPERATION_DESCRIPTIONS: Record<string, string>;

package/dist/components/mcp/tools/schemas/operationDescriptions.js

@@ -0,0 +1,179 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OPERATION_DESCRIPTIONS = void 0;
+/**
+ * Hand-authored MCP tool descriptions for Harper operations.
+ *
+ * Authoring process: each entry was authored by reading the corresponding
+ * handler implementation in `OPERATION_FUNCTION_MAP` — its leading JSDoc,
+ * its actual behavior (mutations, side effects, RBAC, hazards), and its
+ * relationship to sibling operations — and writing a short, verb-led
+ * sentence grounded in that code. The path:line citation above each entry
+ * points to the handler's declaration so reviewers can verify in one click.
+ *
+ * Authoring rubric:
+ *   1. Verb-led sentence: "Creates …", "Returns …", "Restarts …", "Lists …".
+ *   2. Disambiguate from siblings when useful (e.g. search_by_id vs
+ *      search_jobs_by_start_date). The LLM uses these to choose tools.
+ *   3. One cost/hazard sentence for heavy or destructive calls.
+ *   4. ≤ 400 chars per entry. Long descriptions waste context and get
+ *      truncated by some MCP clients.
+ *   5. No PR/issue references in descriptions — they're shown to LLMs at
+ *      tool-selection time, not consumed by human reviewers.
+ *
+ * Coverage target: every operation matching the v1 DEFAULT_ALLOW glob
+ * expansion, plus every destructive operation an operator might opt into
+ * via `mcp.operations.allow`. Out-of-core operations (e.g. harper-pro's
+ * `cluster_status`) cannot have entries here — their authoritative
+ * description belongs alongside their implementation.
+ *
+ * Transitional status: this catalog is the in-core fill until #878
+ * (introspectable operations registry) ships, at which point each
+ * operation's description lives with its schema and its handler in one
+ * place and this file is retired.
+ */
+exports.OPERATION_DESCRIPTIONS = {
+    // ─── DEFAULT_ALLOW: describe_* ────────────────────────────────────────
+    // describe_all: dataLayer/schemaDescribe.ts:22 — Returns the schema tree for every accessible database/table.
+    describe_all: 'Returns the full schema tree: every database, table, and attribute the caller can describe.',
+    // describe_schema: dataLayer/schemaDescribe.ts:239 — Schema metadata filtered by role permissions.
+    describe_schema: "Returns metadata for a schema and its tables, filtered by the caller's role permissions.",
+    // describe_database: dataLayer/schemaDescribe.ts:239 — Alias for describe_schema.
+    describe_database: "Alias for describe_schema. Returns metadata for a database and its tables, filtered by the caller's role permissions.",
+    // describe_table: dataLayer/schemaDescribe.ts:108 — Per-table metadata: attributes, indexes, size, audit status.
+    describe_table: "Returns one table's metadata: attributes, types, indexes, primary key, size, record count, and audit status. Filtered by attribute_permissions. Use to discover what attributes a search_* call can filter on.",
+    // describe_metric: resources/analytics/read.ts:242 — Metric definition for the analytics table.
+    describe_metric: 'Returns attribute names and types for a specific metric in the analytics table. Pair with get_analytics or list_metrics.',
+    // list_agent_sessions: agent/operations.ts:101 — Super-user list of running agent sessions.
+    list_agent_sessions: 'Lists running MCP agent sessions. Requires super_user. Use to surface what the platform is currently running on behalf of which operator.',
+    // ─── DEFAULT_ALLOW: list_* ────────────────────────────────────────────
+    // list_users: security/user.ts:283 — Users + roles + permissions, secrets scrubbed.
+    list_users: 'Lists all system users with their roles and permissions. Password and token data are scrubbed from the output.',
+    // list_roles: security/role.ts:200 — Role catalog with permissions.
+    list_roles: 'Returns all system roles with their associated permission structures.',
+    // list_metrics: resources/analytics/read.ts:180 — Metric catalog over a time window.
+    list_metrics: 'Lists built-in and custom metrics from the analytics table within a specified time window.',
+    // list_deployments: components/deploymentOperations.ts:50 — Deployment history with filtering and pagination.
+    list_deployments: 'Lists deployments from system.hdb_deployment with optional filtering by project, status, and date range, plus pagination.',
+    // ─── DEFAULT_ALLOW: search_* ──────────────────────────────────────────
+    // search_by_conditions: dataLayer/search.ts:6 — Multi-condition search with comparators.
+    search_by_conditions: 'Searches records by an array of conditions with comparators (equals, greater_than, between, etc.). The most expressive search variant.',
+    // search_by_hash: dataLayer/search.ts:11 — Primary-key fetch (1-N).
+    search_by_hash: 'Returns records by primary-key value(s). Fast single-record or batch lookup; pass an array of hashes for multi-record fetch.',
+    // search_by_id: dataLayer/search.ts:11 — Alias of search_by_hash.
+    search_by_id: 'Alias for search_by_hash. Returns records by primary-key value(s).',
+    // search_by_value: dataLayer/search.ts:21 — Single-attribute equality/match search.
+    search_by_value: 'Searches records by matching a single attribute value, with optional sorting. Lighter alternative to search_by_conditions when the predicate is one attribute.',
+    // search: server/serverHelpers/serverUtilities.ts (evaluateSQL) — SQL SELECT entry point.
+    search: 'Executes a SQL SELECT statement and returns matching records as an async iterable. Use sql for INSERT/UPDATE/DELETE instead.',
+    // search_jobs_by_start_date: server/jobs/jobs.ts:48 — Job audit by start-time window.
+    search_jobs_by_start_date: 'Lists background jobs started in a UTC time window. Useful for auditing recent imports, backups, exports, restarts. Pair with get_job for full status.',
+    // ─── DEFAULT_ALLOW: explicit safe getters ─────────────────────────────
+    // get_job: server/jobs/jobs.ts:35 — One job's state + result by id.
+    get_job: 'Returns one background job by id, with status and result payload (export, backup, deploy, restart, csv loads).',
+    // get_status: server/status/index.ts:104 — Status KV entry; aggregated when id omitted.
+    get_status: 'Returns one entry from the in-memory status KV that components publish health and progress to. With no id, returns aggregated status across threads. Safe to poll. Use system_information for server-level health.',
+    // get_analytics: resources/analytics/read.ts:44 — Metric series read with filtering + windowing.
+    get_analytics: 'Returns analytics metric values with optional attribute filtering, time windowing, and result coalescing. Pair with list_metrics to discover available metrics.',
+    // system_information: utility/environment/systemInformation.ts:695 — Host + process metrics snapshot.
+    system_information: 'Snapshot of host metrics: CPU, memory, disk, network, replication lag, process stats, table sizes, database metrics. Heavy — scope with the `attributes` argument (e.g. ["memory","replication"]). Do not poll faster than 10s.',
+    // ─── DEFAULT_ALLOW: read_* ────────────────────────────────────────────
+    // read_log: utility/logging/readLog.ts:24 — Application log slice with filtering.
+    read_log: 'Returns Harper application logs filtered by date range, log level, and search terms, with pagination support.',
+    // read_audit_log: dataLayer/readAuditLog.ts (default export) — Per-table mutation history.
+    read_audit_log: 'Returns mutation history (insert/update/delete) for a table, filterable by timestamp, username, or primary-key value. Requires audit logging enabled. Deprecated in favor of read_transaction_log.',
+    // read_transaction_log: utility/logging/transactionLog.ts:14 — Transaction log slice.
+    read_transaction_log: 'Returns transaction-log entries for a table within an optional timestamp range. The modern successor to read_audit_log.',
+    // ─── Opt-in writes ────────────────────────────────────────────────────
+    // insert: dataLayer/insert.ts:116 — Insert N records; auto-assigns primary key if missing.
+    insert: 'Inserts new records into a table. Records missing a primary key are auto-keyed and returned in the response. Fails if a record exists with the same primary key.',
+    // update: dataLayer/insert.ts:149 — Update records by primary key.
+    update: 'Updates existing records identified by primary key. Patch semantics: only listed attributes are changed; omitted attributes retain their prior values.',
+    // upsert: dataLayer/insert.ts:266 — Atomic insert-or-update.
+    upsert: 'Inserts new records or updates existing ones, keyed by primary key. Atomic across the batch.',
+    // delete: dataLayer/delete.ts:120 — Delete records by primary key hash; returns counts.
+    delete: 'Deletes records by primary-key value(s). Returns the count of deleted records and any hashes that did not match. Destructive — confirm before invoking.',
+    // sql: server/serverHelpers/serverUtilities.ts (evaluateSQL) — Arbitrary SQL.
+    sql: 'Executes arbitrary SQL — SELECT, INSERT, UPDATE, or DELETE. For SELECT-only queries prefer search (clearer intent, safer audit trail).',
+    // ─── Opt-in bulk loads (async jobs) ───────────────────────────────────
+    // csv_data_load: dataLayer/bulkLoad.ts:45 — Load CSV from an inline string into a table.
+    csv_data_load: 'Parses CSV data from a string argument and bulk-loads it into a table. Returns a job id; poll get_job for status. Validates attribute permissions before scheduling.',
+    // csv_file_load: dataLayer/bulkLoad.ts:169 — Load CSV from a local file path.
+    csv_file_load: 'Loads CSV from a local server-side file path into a table. Returns a job id; poll get_job. Requires file-read permission on the path. Costly disk I/O for large files.',
+    // csv_url_load: dataLayer/bulkLoad.ts:117 — Download CSV from URL, then load.
+    csv_url_load: 'Downloads CSV from a URL and loads it into a table. Returns a job id; poll get_job. Costly network + disk I/O; the URL must be reachable from the Harper host.',
+    // import_from_s3: dataLayer/bulkLoad.ts (importFromS3) — Bulk import from S3.
+    import_from_s3: 'Imports CSV or JSON from private S3 buckets into a table. Returns a job id; poll get_job. Requires AWS credentials configured on the Harper host. Costly network operation.',
+    // ─── Opt-in exports (async jobs) ──────────────────────────────────────
+    // export_local: dataLayer/export.ts:38 — Export table to local disk.
+    export_local: 'Exports table records to the local filesystem in JSON or CSV format. Returns a job id; poll get_job. Requires the target path to be writable by Harper.',
+    // export_to_s3: dataLayer/export.ts:188 — Export table to S3.
+    export_to_s3: 'Exports table records to S3 in JSON or CSV format. Returns a job id; poll get_job. Costly network operation; requires AWS credentials configured on the Harper host.',
+    // ─── Opt-in DDL: create_* / drop_* ────────────────────────────────────
+    // create_schema: dataLayer/schema.ts:48 — Create a schema/database.
+    create_schema: 'Creates a new schema (database). Validates the schema name and emits a schema-change signal to all workers and cluster nodes.',
+    // create_database: dataLayer/schema.ts:48 — Alias of create_schema.
+    create_database: 'Alias for create_schema. Creates a new database (schema).',
+    // create_table: dataLayer/schema.ts:85 — Create a table with primary key.
+    create_table: 'Creates a new table in a schema with the specified primary key. Optionally sets data residency for clustered deployments.',
+    // create_attribute: dataLayer/schema.ts:312 — Add an attribute to a table.
+    create_attribute: 'Adds a new attribute to a table. Validates uniqueness and emits a schema-change signal so workers and cluster nodes pick up the new column.',
+    // drop_schema: dataLayer/schema.ts:144 — Delete a schema and its tables.
+    drop_schema: 'Deletes a schema and every table within it. Destructive and replicated to all cluster nodes — confirm scope before invoking.',
+    // drop_database: dataLayer/schema.ts:144 — Alias of drop_schema.
+    drop_database: 'Alias for drop_schema. Deletes a database and every table within it. Destructive and replicated to cluster nodes.',
+    // drop_table: dataLayer/schema.ts:180 — Delete a table.
+    drop_table: 'Deletes a table and its metadata from a schema. Destructive and replicated to cluster nodes.',
+    // drop_attribute: dataLayer/schema.ts:222 — Drop an attribute and its data.
+    drop_attribute: "Removes an attribute and its stored data from a table. Destructive — the attribute's historical values are unrecoverable.",
+    // get_backup: dataLayer/schema.ts:343 — Snapshot a schema/database.
+    get_backup: "Creates a backup of a database via the storage engine's backup utility. May be heavy on disk I/O.",
+    // cleanup_orphan_blobs: dataLayer/schema.ts:347 — Reclaim unreferenced blob files.
+    cleanup_orphan_blobs: 'Identifies and removes orphaned blob files from database storage. Runs asynchronously; check logs for completion.',
+    // ─── Users / roles ────────────────────────────────────────────────────
+    // add_user: security/user.ts:129 — Create a user with role + password.
+    add_user: 'Creates a new Harper user with username, password, and role. Requires super_user. Username is immutable after creation — use drop_user + add_user to rename.',
+    // alter_user: security/user.ts:172 — Mutate user fields; broadcasts cluster event.
+    alter_user: "Updates an existing user's password, role, or active flag. Broadcasts a user-change event to all cluster nodes. Username cannot be changed.",
+    // drop_user: security/user.ts:236 — Delete a user.
+    drop_user: "Deletes a Harper user. Broadcasts a user-change event to all cluster nodes. Destructive — the user's session and refresh tokens stop working immediately.",
+    // user_info: security/user.ts:255 — Caller\'s own user info.
+    user_info: "Returns the authenticated caller's own user info: username, active status, and role permissions. Sensitive fields are scrubbed.",
+    // add_role: security/role.ts:42 — Create a role with permission structure.
+    add_role: 'Creates a new role with the given permission structure. Validates role uniqueness.',
+    // alter_role: security/role.ts:96 — Mutate role permissions; broadcasts.
+    alter_role: "Updates an existing role's permission structure. Broadcasts a role-change event so cluster nodes pick up the new permissions.",
+    // drop_role: security/role.ts:126 — Delete a role; refuses if assigned.
+    drop_role: 'Deletes a role. Refused if any active user is still assigned to the role — drop or reassign those users first.',
+    // create_authentication_tokens: security/tokenAuthentication.ts:86 — Mint operation + refresh token pair.
+    create_authentication_tokens: 'Creates a JWT operation token and a refresh token after validating credentials. Stores the refresh token on the user record.',
+    // refresh_operation_token: security/tokenAuthentication.ts:171 — Mint new operation token from refresh.
+    refresh_operation_token: 'Issues a new operation token using a valid refresh token, without re-authenticating with username/password.',
+    // login: security/auth.ts:371 — Session-based login.
+    login: 'Authenticates the caller and creates a session entry. Requires sessions to be enabled in Harper configuration.',
+    // logout: security/auth.ts:381 — Session-based logout.
+    logout: "Clears the caller's session. Requires sessions to be enabled.",
+    // ─── Configuration & process control ──────────────────────────────────
+    // get_configuration: config/configUtils.js (getConfiguration) — Read config.
+    get_configuration: 'Returns the current Harper configuration values. May expose TLS certs, S3 credentials, and auth secrets — guard tightly and never enable on the MCP allow list without intent.',
+    // set_configuration: config/configUtils.js (setConfiguration) — Mutate config + persist.
+    set_configuration: 'Updates Harper configuration parameters and persists to harperdb-config.yaml. Affects all workers. Most settings require restart to take effect. Destructive — confirm scope before invoking.',
+    // restart: bin/restart.ts:40 — Whole-process restart.
+    restart: 'Restarts the Harper process. Disconnects all clients; replication catches up on reconnect. Can take up to 30 seconds. Destructive — confirm before invoking.',
+    // restart_service: bin/restart.ts:100 — Restart a specific worker pool.
+    restart_service: 'Restarts a specific service (http_workers, custom_functions). Less disruptive than restart. Replicated to cluster nodes when requested.',
+    // catchup: server/serverHelpers/serverUtilities.ts (catchup) — Replay a transaction batch.
+    catchup: 'Replays a batch of insert/update/upsert/delete transactions against a table channel sequentially. Used by replication; rarely invoked directly.',
+    // ─── Retention / housekeeping ─────────────────────────────────────────
+    // delete_files_before: dataLayer/delete.ts:30 — Delete file-backed records older than a cutoff.
+    delete_files_before: 'Deletes file-backed records older than an ISO 8601 timestamp. Does NOT remove values from the database — only file payloads. Cost depends on file volume.',
+    // delete_records_before: dataLayer/delete.ts:30 — Alias of delete_files_before.
+    delete_records_before: 'Alias for delete_files_before. Deletes file-backed records older than a timestamp. Cost depends on volume.',
+    // delete_audit_logs_before: dataLayer/delete.ts:77 — Prune audit entries before cutoff.
+    delete_audit_logs_before: 'Deletes audit/transaction-log entries before a timestamp. Deprecated; prefer delete_transaction_logs_before. Costly on tables with deep audit history.',
+    // delete_transaction_logs_before: utility/logging/transactionLog.ts:43 — Prune transaction log before cutoff.
+    delete_transaction_logs_before: 'Deletes transaction-log entries before a timestamp for a specified table. Destructive bulk operation; pruned entries cannot be recovered.',
+    // get_metrics: resources/analytics/read.ts (analytics.getOp) — Alias for get_analytics.
+    get_metrics: 'Alias for get_analytics. Returns analytics metric values with optional attribute filtering and time windowing. Pair with list_metrics to discover available metrics.',
+};
+//# sourceMappingURL=operationDescriptions.js.map

package/dist/components/mcp/tools/schemas/operationDescriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationDescriptions.js","sourceRoot":"","sources":["../../../../../components/mcp/tools/schemas/operationDescriptions.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,sBAAsB,GAA2B;IAC7D,yEAAyE;IACzE,8GAA8G;IAC9G,YAAY,EAAE,6FAA6F;IAC3G,mGAAmG;IACnG,eAAe,EAAE,0FAA0F;IAC3G,kFAAkF;IAClF,iBAAiB,EAChB,uHAAuH;IACxH,iHAAiH;IACjH,cAAc,EACb,gNAAgN;IACjN,gGAAgG;IAChG,eAAe,EACd,0HAA0H;IAE3H,4FAA4F;IAC5F,mBAAmB,EAClB,2IAA2I;IAE5I,yEAAyE;IACzE,oFAAoF;IACpF,UAAU,EACT,gHAAgH;IACjH,oEAAoE;IACpE,UAAU,EAAE,uEAAuE;IACnF,qFAAqF;IACrF,YAAY,EAAE,4FAA4F;IAC1G,8GAA8G;IAC9G,gBAAgB,EACf,2HAA2H;IAE5H,yEAAyE;IACzE,yFAAyF;IACzF,oBAAoB,EACnB,wIAAwI;IACzI,oEAAoE;IACpE,cAAc,EACb,8HAA8H;IAC/H,kEAAkE;IAClE,YAAY,EAAE,oEAAoE;IAClF,oFAAoF;IACpF,eAAe,EACd,gKAAgK;IACjK,0FAA0F;IAC1F,MAAM,EACL,8HAA8H;IAC/H,sFAAsF;IACtF,yBAAyB,EACxB,wJAAwJ;IAEzJ,yEAAyE;IACzE,oEAAoE;IACpE,OAAO,EACN,gHAAgH;IACjH,wFAAwF;IACxF,UAAU,EACT,oNAAoN;IACrN,iGAAiG;IACjG,aAAa,EACZ,iKAAiK;IAClK,sGAAsG;IACtG,kBAAkB,EACjB,iOAAiO;IAElO,yEAAyE;IACzE,kFAAkF;IAClF,QAAQ,EACP,+GAA+G;IAChH,2FAA2F;IAC3F,cAAc,EACb,oMAAoM;IACrM,sFAAsF;IACtF,oBAAoB,EACnB,yHAAyH;IAE1H,yEAAyE;IACzE,2FAA2F;IAC3F,MAAM,EACL,kKAAkK;IACnK,mEAAmE;IACnE,MAAM,EACL,wJAAwJ;IACzJ,6DAA6D;IAC7D,MAAM,EAAE,8FAA8F;IACtG,wFAAwF;IACxF,MAAM,EACL,yJAAyJ;IAC1J,8EAA8E;IAC9E,GAAG,EAAE,wIAAwI;IAE7I,yEAAyE;IACzE,yFAAyF;IACzF,aAAa,EACZ,sKAAsK;IACvK,8EAA8E;IAC9E,aAAa,EACZ,wKAAwK;IACzK,8EAA8E;IAC9E,YAAY,EACX,gKAAgK;IACjK,8EAA8E;IAC9E,cAAc,EACb,6KAA6K;IAE9K,yEAAyE;IACzE,qEAAqE;IACrE,YAAY,EACX,yJAAyJ;IAC1J,8DAA8D;IAC9D,YAAY,EACX,sKAAsK;IAEvK,yEAAyE;IACzE,oEAAoE;IACpE,aAAa,EACZ,+HAA+H;IAChI,oEAAoE;IACpE,eAAe,EAAE,2DAA2D;IAC5E,0EAA0E;IAC1E,YAAY,EACX,2HAA2H;IAC5H,2EAA2E;IAC3E,gBAAgB,EACf,6IAA6I;IAC9I,yEAAyE;IACzE,WAAW,EACV,8HAA8H;IAC/H,iEAAiE;IACjE,aAAa,EACZ,mHAAmH;IACpH,wDAAwD;IACxD,UAAU,EAAE,8FAA8F;IAC1G,4EAA4E;IAC5E,cAAc,EACb,2HAA2H;IAC5H,oEAAoE;IACpE,UAAU,EAAE,mGAAmG;IAC/G,mFAAmF;IACnF,oBAAoB,EACnB,mHAAmH;IAEpH,yEAAyE;IACzE,uEAAuE;IACvE,QAAQ,EACP,8JAA8J;IAC/J,mFAAmF;IACnF,UAAU,EACT,6IAA6I;IAC9I,mDAAmD;IACnD,SAAS,EACR,2JAA2J;IAC5J,6DAA6D;IAC7D,SAAS,EACR,iIAAiI;IAClI,2EAA2E;IAC3E,QAAQ,EAAE,oFAAoF;IAC9F,yEAAyE;IACzE,UAAU,EACT,+HAA+H;IAChI,wEAAwE;IACxE,SAAS,EACR,gHAAgH;IACjH,0GAA0G;IAC1G,4BAA4B,EAC3B,8HAA8H;IAC/H,wGAAwG;IACxG,uBAAuB,EACtB,6GAA6G;IAC9G,qDAAqD;IACrD,KAAK,EACJ,gHAAgH;IACjH,uDAAuD;IACvD,MAAM,EAAE,+DAA+D;IAEvE,yEAAyE;IACzE,6EAA6E;IAC7E,iBAAiB,EAChB,gLAAgL;IACjL,yFAAyF;IACzF,iBAAiB,EAChB,+LAA+L;IAChM,sDAAsD;IACtD,OAAO,EACN,8JAA8J;IAC/J,wEAAwE;IACxE,eAAe,EACd,yIAAyI;IAC1I,2FAA2F;IAC3F,OAAO,EACN,iJAAiJ;IAElJ,yEAAyE;IACzE,gGAAgG;IAChG,mBAAmB,EAClB,2JAA2J;IAC5J,gFAAgF;IAChF,qBAAqB,EACpB,4GAA4G;IAC7G,wFAAwF;IACxF,wBAAwB,EACvB,wJAAwJ;IACzJ,8GAA8G;IAC9G,8BAA8B,EAC7B,2IAA2I;IAE5I,wFAAwF;IACxF,WAAW,EACV,sKAAsK;CACvK,CAAC"}

package/dist/components/mcp/tools/schemas/operations.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Hand-curated JSON Schemas for the operations-profile MCP tools.
+ *
+ * Why hand-curated: Harper's server-side validators are Joi, which doesn't
+ * round-trip cleanly to JSON Schema. The MCP spec requires draft-07-ish
+ * JSON Schema for tool inputSchema. Authoring these directly keeps the
+ * schemas readable, easy to tweak per the LLM ergonomics we want, and
+ * decoupled from server-side validation evolution.
+ *
+ * Each schema follows MCP convention: `type: 'object'` at the top, with
+ * `properties` declared and a small `required` list when applicable.
+ * Optional fields are listed but not required, so an LLM can call the
+ * minimum-viable form.
+ *
+ * Coverage matches the v1 conservative `allow` default in the design
+ * (#465 → Operations MCP). When operators expand `mcp.operations.allow`
+ * beyond this list, ops without an entry here fall back to a permissive
+ * `{ type: 'object' }` schema and a runtime-validates-as-it-goes posture
+ * — better than silently dropping them from the tool surface.
+ */
+/** Permissive default for any opted-in operation that doesn't have a hand-curated schema yet. */
+export declare const PERMISSIVE_SCHEMA: object;
+/**
+ * Map of operation name → input schema. Lookup misses fall back to
+ * `PERMISSIVE_SCHEMA`. Keys mirror `OPERATIONS_ENUM` values.
+ */
+export declare const OPERATION_INPUT_SCHEMAS: Record<string, object>;