@josephyan/qingflow-cli 0.2.0-beta.71 → 0.2.0-beta.73

package/src/qingflow_mcp/response_trim.py

@@ -8,6 +8,8 @@ from typing import Any, Callable
 
 JSONObject = dict[str, Any]
 TransformFn = Callable[[JSONObject], None]
+USER_DOMAIN = "user"
+BUILDER_DOMAIN = "builder"
 
 
 COMMON_SUCCESS_DROP_TOP = {
@@ -45,6 +47,10 @@ COMMON_ERROR_DROP_TOP = {
 SUCCESS_POLICY_BY_TOOL: dict[str, TransformFn] = {}
 
 
+def _tool_key(domain: str, tool_name: str) -> str:
+    return f"{domain}:{tool_name}"
+
+
 def trim_public_response(tool_name: str | None, payload: dict[str, Any]) -> dict[str, Any]:
     if not isinstance(payload, dict):
         return payload
@@ -97,215 +103,242 @@ def resolve_cli_tool_name(args: Any) -> str | None:
     command = getattr(args, "command", None)
     if command == "auth":
         return {
-            "login": "auth_login",
-            "use-token": "auth_use_token",
-            "whoami": "auth_whoami",
-            "logout": "auth_logout",
+            "login": _tool_key(USER_DOMAIN, "auth_login"),
+            "use-token": _tool_key(USER_DOMAIN, "auth_use_token"),
+            "whoami": _tool_key(USER_DOMAIN, "auth_whoami"),
+            "logout": _tool_key(USER_DOMAIN, "auth_logout"),
         }.get(getattr(args, "auth_command", None))
     if command == "workspace":
         return {
-            "list": "workspace_list",
-            "select": "workspace_select",
+            "list": _tool_key(USER_DOMAIN, "workspace_list"),
+            "select": _tool_key(USER_DOMAIN, "workspace_select"),
         }.get(getattr(args, "workspace_command", None))
     if command == "app":
         return {
-            "list": "app_list",
-            "search": "app_search",
-            "get": "app_get",
+            "list": _tool_key(USER_DOMAIN, "app_list"),
+            "search": _tool_key(USER_DOMAIN, "app_search"),
+            "get": _tool_key(USER_DOMAIN, "app_get"),
         }.get(getattr(args, "app_command", None))
+    if command == "portal":
+        return {
+            "list": _tool_key(USER_DOMAIN, "portal_list"),
+            "get": _tool_key(USER_DOMAIN, "portal_get"),
+        }.get(getattr(args, "portal_command", None))
+    if command == "view":
+        return {
+            "get": _tool_key(USER_DOMAIN, "view_get"),
+        }.get(getattr(args, "view_command", None))
+    if command == "chart":
+        return {
+            "get": _tool_key(USER_DOMAIN, "chart_get"),
+        }.get(getattr(args, "chart_command", None))
     if command == "record":
         record_command = getattr(args, "record_command", None)
         if record_command == "schema":
             return {
-                "applicant": "record_schema_get",
-                "browse": "record_browse_schema_get",
-                "insert": "record_insert_schema_get",
-                "update": "record_update_schema_get",
-                "import": "record_import_schema_get",
-                "code-block": "record_code_block_schema_get",
+                "applicant": _tool_key(USER_DOMAIN, "record_schema_get"),
+                "browse": _tool_key(USER_DOMAIN, "record_browse_schema_get"),
+                "insert": _tool_key(USER_DOMAIN, "record_insert_schema_get"),
+                "update": _tool_key(USER_DOMAIN, "record_update_schema_get"),
+                "import": _tool_key(USER_DOMAIN, "record_import_schema_get"),
+                "code-block": _tool_key(USER_DOMAIN, "record_code_block_schema_get"),
             }.get(getattr(args, "record_schema_command", None))
         return {
-            "list": "record_list",
-            "get": "record_get",
-            "insert": "record_insert",
-            "update": "record_update",
-            "delete": "record_delete",
-            "analyze": "record_analyze",
-            "code-block-run": "record_code_block_run",
+            "list": _tool_key(USER_DOMAIN, "record_list"),
+            "get": _tool_key(USER_DOMAIN, "record_get"),
+            "insert": _tool_key(USER_DOMAIN, "record_insert"),
+            "update": _tool_key(USER_DOMAIN, "record_update"),
+            "delete": _tool_key(USER_DOMAIN, "record_delete"),
+            "analyze": _tool_key(USER_DOMAIN, "record_analyze"),
+            "code-block-run": _tool_key(USER_DOMAIN, "record_code_block_run"),
         }.get(record_command)
     if command == "import":
         return {
-            "template": "record_import_template_get",
-            "verify": "record_import_verify",
-            "repair": "record_import_repair_local",
-            "start": "record_import_start",
-            "status": "record_import_status_get",
+            "template": _tool_key(USER_DOMAIN, "record_import_template_get"),
+            "verify": _tool_key(USER_DOMAIN, "record_import_verify"),
+            "repair": _tool_key(USER_DOMAIN, "record_import_repair_local"),
+            "start": _tool_key(USER_DOMAIN, "record_import_start"),
+            "status": _tool_key(USER_DOMAIN, "record_import_status_get"),
         }.get(getattr(args, "import_command", None))
     if command == "task":
         return {
-            "list": "task_list",
-            "get": "task_get",
-            "action": "task_action_execute",
-            "log": "task_workflow_log_get",
+            "list": _tool_key(USER_DOMAIN, "task_list"),
+            "get": _tool_key(USER_DOMAIN, "task_get"),
+            "action": _tool_key(USER_DOMAIN, "task_action_execute"),
+            "log": _tool_key(USER_DOMAIN, "task_workflow_log_get"),
         }.get(getattr(args, "task_command", None))
     if command not in {"builder", "build"}:
         return None
     builder_command = getattr(args, "builder_command", None)
+    if builder_command == "file":
+        return {
+            "upload-local": _tool_key(BUILDER_DOMAIN, "file_upload_local"),
+        }.get(getattr(args, "builder_file_command", None))
+    if builder_command == "feedback":
+        return {
+            "submit": _tool_key(BUILDER_DOMAIN, "feedback_submit"),
+        }.get(getattr(args, "builder_feedback_command", None))
     if builder_command == "contract":
-        return "builder_tool_contract"
+        return _tool_key(BUILDER_DOMAIN, "builder_tool_contract")
     if builder_command == "member":
         return {
-            "search": "member_search",
+            "search": _tool_key(BUILDER_DOMAIN, "member_search"),
         }.get(getattr(args, "builder_member_command", None))
     if builder_command == "role":
         return {
-            "search": "role_search",
-            "create": "role_create",
+            "search": _tool_key(BUILDER_DOMAIN, "role_search"),
+            "create": _tool_key(BUILDER_DOMAIN, "role_create"),
         }.get(getattr(args, "builder_role_command", None))
     if builder_command == "package":
         return {
-            "list": "package_list",
-            "resolve": "package_resolve",
-            "create": "package_create",
-            "attach-app": "package_attach_app",
+            "list": _tool_key(BUILDER_DOMAIN, "package_list"),
+            "resolve": _tool_key(BUILDER_DOMAIN, "package_resolve"),
+            "create": _tool_key(BUILDER_DOMAIN, "package_create"),
+            "attach-app": _tool_key(BUILDER_DOMAIN, "package_attach_app"),
         }.get(getattr(args, "builder_package_command", None))
     if builder_command == "app":
+        app_command = getattr(args, "builder_app_command", None)
+        if app_command == "get":
+            return {
+                "summary": _tool_key(BUILDER_DOMAIN, "app_get"),
+                "fields": _tool_key(BUILDER_DOMAIN, "app_get_fields"),
+                "layout": _tool_key(BUILDER_DOMAIN, "app_get_layout"),
+                "views": _tool_key(BUILDER_DOMAIN, "app_get_views"),
+                "flow": _tool_key(BUILDER_DOMAIN, "app_get_flow"),
+                "charts": _tool_key(BUILDER_DOMAIN, "app_get_charts"),
+            }.get(getattr(args, "builder_app_get_section", "summary"))
         return {
-            "resolve": "app_resolve",
-            "release-edit-lock-if-mine": "app_release_edit_lock_if_mine",
-            "read-summary": "app_read_summary",
-            "read-fields": "app_read_fields",
-            "read-layout": "app_read_layout_summary",
-            "read-views": "app_read_views_summary",
-            "read-flow": "app_read_flow_summary",
-            "read-charts": "app_read_charts_summary",
-        }.get(getattr(args, "builder_app_command", None))
+            "resolve": _tool_key(BUILDER_DOMAIN, "app_resolve"),
+            "release-edit-lock-if-mine": _tool_key(BUILDER_DOMAIN, "app_release_edit_lock_if_mine"),
+        }.get(app_command)
     if builder_command == "button":
         return {
-            "list": "app_custom_button_list",
-            "get": "app_custom_button_get",
-            "create": "app_custom_button_create",
-            "update": "app_custom_button_update",
-            "delete": "app_custom_button_delete",
+            "list": _tool_key(BUILDER_DOMAIN, "app_custom_button_list"),
+            "get": _tool_key(BUILDER_DOMAIN, "app_custom_button_get"),
+            "create": _tool_key(BUILDER_DOMAIN, "app_custom_button_create"),
+            "update": _tool_key(BUILDER_DOMAIN, "app_custom_button_update"),
+            "delete": _tool_key(BUILDER_DOMAIN, "app_custom_button_delete"),
         }.get(getattr(args, "builder_button_command", None))
     if builder_command == "portal":
         return {
-            "list": "portal_list",
-            "get": "portal_get",
-            "read-summary": "portal_read_summary",
-            "apply": "portal_apply",
+            "list": _tool_key(BUILDER_DOMAIN, "portal_list"),
+            "get": _tool_key(BUILDER_DOMAIN, "portal_get"),
+            "apply": _tool_key(BUILDER_DOMAIN, "portal_apply"),
         }.get(getattr(args, "builder_portal_command", None))
     if builder_command == "view":
         return {
-            "get": "view_get",
+            "get": _tool_key(BUILDER_DOMAIN, "view_get"),
         }.get(getattr(args, "builder_view_command", None))
     if builder_command == "chart":
         return {
-            "get": "chart_get",
+            "get": _tool_key(BUILDER_DOMAIN, "chart_get"),
         }.get(getattr(args, "builder_chart_command", None))
     if builder_command == "schema":
-        return {"apply": "app_schema_apply"}.get(getattr(args, "builder_schema_command", None))
+        return {"apply": _tool_key(BUILDER_DOMAIN, "app_schema_apply")}.get(getattr(args, "builder_schema_command", None))
     if builder_command == "layout":
-        return {"apply": "app_layout_apply"}.get(getattr(args, "builder_layout_command", None))
+        return {"apply": _tool_key(BUILDER_DOMAIN, "app_layout_apply")}.get(getattr(args, "builder_layout_command", None))
     if builder_command == "views":
-        return {"apply": "app_views_apply"}.get(getattr(args, "builder_views_command", None))
+        return {"apply": _tool_key(BUILDER_DOMAIN, "app_views_apply")}.get(getattr(args, "builder_views_command", None))
     if builder_command == "flow":
-        return {"apply": "app_flow_apply"}.get(getattr(args, "builder_flow_command", None))
+        return {"apply": _tool_key(BUILDER_DOMAIN, "app_flow_apply")}.get(getattr(args, "builder_flow_command", None))
     if builder_command == "charts":
-        return {"apply": "app_charts_apply"}.get(getattr(args, "builder_charts_command", None))
+        return {"apply": _tool_key(BUILDER_DOMAIN, "app_charts_apply")}.get(getattr(args, "builder_charts_command", None))
     if builder_command == "publish":
-        return {"verify": "app_publish_verify"}.get(getattr(args, "builder_publish_command", None))
+        return {"verify": _tool_key(BUILDER_DOMAIN, "app_publish_verify")}.get(getattr(args, "builder_publish_command", None))
     return None
 
 
 USER_SERVER_METHOD_MAP = {
-    "auth_login": "auth_login",
-    "auth_use_token": "auth_use_token",
-    "auth_whoami": "auth_whoami",
-    "auth_logout": "auth_logout",
-    "workspace_list": "workspace_list",
-    "workspace_select": "workspace_select",
-    "app_list": "app_list",
-    "app_search": "app_search",
-    "app_get": "app_get",
-    "file_get_upload_info": "file_get_upload_info",
-    "file_upload_local": "file_upload_local",
-    "feedback_submit": "feedback_submit",
-    "record_import_schema_get": "record_import_schema_get",
-    "record_import_template_get": "record_import_template_get",
-    "record_import_verify": "record_import_verify",
-    "record_import_repair_local": "record_import_repair_local",
-    "record_import_start": "record_import_start",
-    "record_import_status_get": "record_import_status_get",
-    "record_insert_schema_get_public": "record_insert_schema_get",
-    "record_member_candidates": "record_member_candidates",
-    "record_department_candidates": "record_department_candidates",
-    "record_analyze": "record_analyze",
-    "record_list": "record_list",
-    "record_get_public": "record_get",
-    "record_browse_schema_get_public": "record_browse_schema_get",
-    "record_update_schema_get_public": "record_update_schema_get",
-    "record_insert_public": "record_insert",
-    "record_update_public": "record_update",
-    "record_delete_public": "record_delete",
-    "record_code_block_schema_get_public": "record_code_block_schema_get",
-    "record_code_block_run": "record_code_block_run",
-    "task_list": "task_list",
-    "task_get": "task_get",
-    "task_action_execute": "task_action_execute",
-    "task_associated_report_detail_get": "task_associated_report_detail_get",
-    "task_workflow_log_get": "task_workflow_log_get",
-    "directory_search": "directory_search",
-    "directory_list_internal_users": "directory_list_internal_users",
-    "directory_list_all_internal_users": "directory_list_all_internal_users",
-    "directory_list_internal_departments": "directory_list_internal_departments",
-    "directory_list_all_departments": "directory_list_all_departments",
-    "directory_list_sub_departments": "directory_list_sub_departments",
-    "directory_list_external_members": "directory_list_external_members",
+    "auth_login": _tool_key(USER_DOMAIN, "auth_login"),
+    "auth_use_token": _tool_key(USER_DOMAIN, "auth_use_token"),
+    "auth_whoami": _tool_key(USER_DOMAIN, "auth_whoami"),
+    "auth_logout": _tool_key(USER_DOMAIN, "auth_logout"),
+    "workspace_list": _tool_key(USER_DOMAIN, "workspace_list"),
+    "workspace_select": _tool_key(USER_DOMAIN, "workspace_select"),
+    "app_list": _tool_key(USER_DOMAIN, "app_list"),
+    "app_search": _tool_key(USER_DOMAIN, "app_search"),
+    "app_get": _tool_key(USER_DOMAIN, "app_get"),
+    "portal_list": _tool_key(USER_DOMAIN, "portal_list"),
+    "portal_get": _tool_key(USER_DOMAIN, "portal_get"),
+    "view_get": _tool_key(USER_DOMAIN, "view_get"),
+    "chart_get": _tool_key(USER_DOMAIN, "chart_get"),
+    "file_get_upload_info": _tool_key(USER_DOMAIN, "file_get_upload_info"),
+    "file_upload_local": _tool_key(USER_DOMAIN, "file_upload_local"),
+    "feedback_submit": _tool_key(USER_DOMAIN, "feedback_submit"),
+    "record_import_schema_get": _tool_key(USER_DOMAIN, "record_import_schema_get"),
+    "record_import_template_get": _tool_key(USER_DOMAIN, "record_import_template_get"),
+    "record_import_verify": _tool_key(USER_DOMAIN, "record_import_verify"),
+    "record_import_repair_local": _tool_key(USER_DOMAIN, "record_import_repair_local"),
+    "record_import_start": _tool_key(USER_DOMAIN, "record_import_start"),
+    "record_import_status_get": _tool_key(USER_DOMAIN, "record_import_status_get"),
+    "record_insert_schema_get_public": _tool_key(USER_DOMAIN, "record_insert_schema_get"),
+    "record_member_candidates": _tool_key(USER_DOMAIN, "record_member_candidates"),
+    "record_department_candidates": _tool_key(USER_DOMAIN, "record_department_candidates"),
+    "record_analyze": _tool_key(USER_DOMAIN, "record_analyze"),
+    "record_list": _tool_key(USER_DOMAIN, "record_list"),
+    "record_get_public": _tool_key(USER_DOMAIN, "record_get"),
+    "record_browse_schema_get_public": _tool_key(USER_DOMAIN, "record_browse_schema_get"),
+    "record_update_schema_get_public": _tool_key(USER_DOMAIN, "record_update_schema_get"),
+    "record_insert_public": _tool_key(USER_DOMAIN, "record_insert"),
+    "record_update_public": _tool_key(USER_DOMAIN, "record_update"),
+    "record_delete_public": _tool_key(USER_DOMAIN, "record_delete"),
+    "record_code_block_schema_get_public": _tool_key(USER_DOMAIN, "record_code_block_schema_get"),
+    "record_code_block_run": _tool_key(USER_DOMAIN, "record_code_block_run"),
+    "task_list": _tool_key(USER_DOMAIN, "task_list"),
+    "task_get": _tool_key(USER_DOMAIN, "task_get"),
+    "task_action_execute": _tool_key(USER_DOMAIN, "task_action_execute"),
+    "task_associated_report_detail_get": _tool_key(USER_DOMAIN, "task_associated_report_detail_get"),
+    "task_workflow_log_get": _tool_key(USER_DOMAIN, "task_workflow_log_get"),
+    "directory_search": _tool_key(USER_DOMAIN, "directory_search"),
+    "directory_list_internal_users": _tool_key(USER_DOMAIN, "directory_list_internal_users"),
+    "directory_list_all_internal_users": _tool_key(USER_DOMAIN, "directory_list_all_internal_users"),
+    "directory_list_internal_departments": _tool_key(USER_DOMAIN, "directory_list_internal_departments"),
+    "directory_list_all_departments": _tool_key(USER_DOMAIN, "directory_list_all_departments"),
+    "directory_list_sub_departments": _tool_key(USER_DOMAIN, "directory_list_sub_departments"),
+    "directory_list_external_members": _tool_key(USER_DOMAIN, "directory_list_external_members"),
 }
 
 BUILDER_SERVER_METHOD_MAP = {
-    "auth_login": "auth_login",
-    "auth_use_token": "auth_use_token",
-    "auth_whoami": "auth_whoami",
-    "auth_logout": "auth_logout",
-    "workspace_list": "workspace_list",
-    "workspace_select": "workspace_select",
-    "file_upload_local": "file_upload_local",
-    "feedback_submit": "feedback_submit",
-    "package_list": "package_list",
-    "package_resolve": "package_resolve",
-    "builder_tool_contract": "builder_tool_contract",
-    "package_create": "package_create",
-    "member_search": "member_search",
-    "role_search": "role_search",
-    "role_create": "role_create",
-    "package_attach_app": "package_attach_app",
-    "app_release_edit_lock_if_mine": "app_release_edit_lock_if_mine",
-    "app_resolve": "app_resolve",
-    "app_custom_button_list": "app_custom_button_list",
-    "app_custom_button_get": "app_custom_button_get",
-    "app_custom_button_create": "app_custom_button_create",
-    "app_custom_button_update": "app_custom_button_update",
-    "app_custom_button_delete": "app_custom_button_delete",
-    "app_read_summary": "app_read_summary",
-    "app_read_fields": "app_read_fields",
-    "app_read_layout_summary": "app_read_layout_summary",
-    "app_read_views_summary": "app_read_views_summary",
-    "app_read_flow_summary": "app_read_flow_summary",
-    "app_read_charts_summary": "app_read_charts_summary",
-    "portal_list": "portal_list",
-    "portal_get": "portal_get",
-    "portal_read_summary": "portal_read_summary",
-    "view_get": "view_get",
-    "chart_get": "chart_get",
-    "app_schema_apply": "app_schema_apply",
-    "app_layout_apply": "app_layout_apply",
-    "app_flow_apply": "app_flow_apply",
-    "app_views_apply": "app_views_apply",
-    "app_charts_apply": "app_charts_apply",
-    "portal_apply": "portal_apply",
-    "app_publish_verify": "app_publish_verify",
+    "auth_login": _tool_key(BUILDER_DOMAIN, "auth_login"),
+    "auth_use_token": _tool_key(BUILDER_DOMAIN, "auth_use_token"),
+    "auth_whoami": _tool_key(BUILDER_DOMAIN, "auth_whoami"),
+    "auth_logout": _tool_key(BUILDER_DOMAIN, "auth_logout"),
+    "workspace_list": _tool_key(BUILDER_DOMAIN, "workspace_list"),
+    "workspace_select": _tool_key(BUILDER_DOMAIN, "workspace_select"),
+    "file_upload_local": _tool_key(BUILDER_DOMAIN, "file_upload_local"),
+    "feedback_submit": _tool_key(BUILDER_DOMAIN, "feedback_submit"),
+    "package_list": _tool_key(BUILDER_DOMAIN, "package_list"),
+    "package_resolve": _tool_key(BUILDER_DOMAIN, "package_resolve"),
+    "builder_tool_contract": _tool_key(BUILDER_DOMAIN, "builder_tool_contract"),
+    "package_create": _tool_key(BUILDER_DOMAIN, "package_create"),
+    "member_search": _tool_key(BUILDER_DOMAIN, "member_search"),
+    "role_search": _tool_key(BUILDER_DOMAIN, "role_search"),
+    "role_create": _tool_key(BUILDER_DOMAIN, "role_create"),
+    "package_attach_app": _tool_key(BUILDER_DOMAIN, "package_attach_app"),
+    "app_release_edit_lock_if_mine": _tool_key(BUILDER_DOMAIN, "app_release_edit_lock_if_mine"),
+    "app_resolve": _tool_key(BUILDER_DOMAIN, "app_resolve"),
+    "app_custom_button_list": _tool_key(BUILDER_DOMAIN, "app_custom_button_list"),
+    "app_custom_button_get": _tool_key(BUILDER_DOMAIN, "app_custom_button_get"),
+    "app_custom_button_create": _tool_key(BUILDER_DOMAIN, "app_custom_button_create"),
+    "app_custom_button_update": _tool_key(BUILDER_DOMAIN, "app_custom_button_update"),
+    "app_custom_button_delete": _tool_key(BUILDER_DOMAIN, "app_custom_button_delete"),
+    "app_get": _tool_key(BUILDER_DOMAIN, "app_get"),
+    "app_get_fields": _tool_key(BUILDER_DOMAIN, "app_get_fields"),
+    "app_get_layout": _tool_key(BUILDER_DOMAIN, "app_get_layout"),
+    "app_get_views": _tool_key(BUILDER_DOMAIN, "app_get_views"),
+    "app_get_flow": _tool_key(BUILDER_DOMAIN, "app_get_flow"),
+    "app_get_charts": _tool_key(BUILDER_DOMAIN, "app_get_charts"),
+    "portal_list": _tool_key(BUILDER_DOMAIN, "portal_list"),
+    "portal_get": _tool_key(BUILDER_DOMAIN, "portal_get"),
+    "view_get": _tool_key(BUILDER_DOMAIN, "view_get"),
+    "chart_get": _tool_key(BUILDER_DOMAIN, "chart_get"),
+    "app_schema_apply": _tool_key(BUILDER_DOMAIN, "app_schema_apply"),
+    "app_layout_apply": _tool_key(BUILDER_DOMAIN, "app_layout_apply"),
+    "app_flow_apply": _tool_key(BUILDER_DOMAIN, "app_flow_apply"),
+    "app_views_apply": _tool_key(BUILDER_DOMAIN, "app_views_apply"),
+    "app_charts_apply": _tool_key(BUILDER_DOMAIN, "app_charts_apply"),
+    "portal_apply": _tool_key(BUILDER_DOMAIN, "portal_apply"),
+    "app_publish_verify": _tool_key(BUILDER_DOMAIN, "app_publish_verify"),
 }
 
 
@@ -475,6 +508,7 @@ def _trim_app_search_like(payload: JSONObject) -> None:
 
 
 def _trim_app_get(payload: JSONObject) -> None:
+    _trim_builder_envelope(payload)
     _trim_nested_item_list(
         payload,
         ("data", "accessible_views"),
@@ -563,20 +597,23 @@ def _trim_builder_list_like(payload: JSONObject) -> None:
     _trim_builder_envelope(payload)
 
 
-def _register_policy(names: tuple[str, ...], transform: TransformFn) -> None:
-    for name in names:
-        SUCCESS_POLICY_BY_TOOL[name] = transform
+def _register_policy(domains: tuple[str, ...], names: tuple[str, ...], transform: TransformFn) -> None:
+    for domain in domains:
+        for name in names:
+            SUCCESS_POLICY_BY_TOOL[_tool_key(domain, name)] = transform
 
 
-_register_policy(("auth_login", "auth_use_token", "auth_whoami"), _trim_auth_payload)
-_register_policy(("auth_logout",), _trim_auth_logout)
-_register_policy(("workspace_list",), _trim_workspace_list)
-_register_policy(("workspace_select",), _trim_workspace_select)
-_register_policy(("app_list", "app_search"), _trim_app_search_like)
-_register_policy(("app_get",), _trim_app_get)
-_register_policy(("file_get_upload_info",), _trim_file_upload_info)
-_register_policy(("file_upload_local",), _trim_file_upload_local)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("auth_login", "auth_use_token", "auth_whoami"), _trim_auth_payload)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("auth_logout",), _trim_auth_logout)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("workspace_list",), _trim_workspace_list)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("workspace_select",), _trim_workspace_select)
+_register_policy((USER_DOMAIN,), ("app_list", "app_search"), _trim_app_search_like)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("app_get",), _trim_app_get)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("portal_list", "portal_get", "view_get", "chart_get"), _trim_builder_list_like)
+_register_policy((USER_DOMAIN,), ("file_get_upload_info",), _trim_file_upload_info)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("file_upload_local",), _trim_file_upload_local)
 _register_policy(
+    (USER_DOMAIN,),
     (
         "record_import_schema_get",
         "record_import_template_get",
@@ -588,6 +625,7 @@ _register_policy(
     _trim_import_schema,
 )
 _register_policy(
+    (USER_DOMAIN,),
     (
         "record_schema_get",
         "record_insert_schema_get",
@@ -597,13 +635,14 @@ _register_policy(
     ),
     _trim_record_schema,
 )
-_register_policy(("record_insert", "record_update"), _trim_record_write)
-_register_policy(("record_get",), _trim_record_get)
-_register_policy(("record_list",), _trim_record_list)
-_register_policy(("record_analyze",), _trim_record_analyze)
-_register_policy(("record_code_block_run",), _trim_code_block_run)
-_register_policy(("task_list",), _trim_task_list)
+_register_policy((USER_DOMAIN,), ("record_insert", "record_update"), _trim_record_write)
+_register_policy((USER_DOMAIN,), ("record_get",), _trim_record_get)
+_register_policy((USER_DOMAIN,), ("record_list",), _trim_record_list)
+_register_policy((USER_DOMAIN,), ("record_analyze",), _trim_record_analyze)
+_register_policy((USER_DOMAIN,), ("record_code_block_run",), _trim_code_block_run)
+_register_policy((USER_DOMAIN,), ("task_list",), _trim_task_list)
 _register_policy(
+    (USER_DOMAIN,),
     (
         "task_get",
         "task_action_execute",
@@ -613,6 +652,7 @@ _register_policy(
     _trim_task_get,
 )
 _register_policy(
+    (USER_DOMAIN,),
     (
         "directory_search",
         "directory_list_internal_users",
@@ -624,12 +664,19 @@ _register_policy(
     ),
     _trim_directory,
 )
-_register_policy(("feedback_submit",), _trim_feedback)
+_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("feedback_submit",), _trim_feedback)
 _register_policy(
+    (USER_DOMAIN,),
     (
         "record_member_candidates",
         "record_department_candidates",
         "record_delete",
+    ),
+    _trim_builder_list_like,
+)
+_register_policy(
+    (BUILDER_DOMAIN,),
+    (
         "package_list",
         "package_resolve",
         "builder_tool_contract",
@@ -645,17 +692,11 @@ _register_policy(
         "app_custom_button_create",
         "app_custom_button_update",
         "app_custom_button_delete",
-        "app_read_summary",
-        "app_read_fields",
-        "app_read_layout_summary",
-        "app_read_views_summary",
-        "app_read_flow_summary",
-        "app_read_charts_summary",
-        "portal_list",
-        "portal_get",
-        "portal_read_summary",
-        "view_get",
-        "chart_get",
+        "app_get_fields",
+        "app_get_layout",
+        "app_get_views",
+        "app_get_flow",
+        "app_get_charts",
         "app_schema_apply",
         "app_layout_apply",
         "app_flow_apply",