@josephyan/qingflow-cli 0.2.0-beta.74 → 0.2.0-beta.75

package/src/qingflow_mcp/public_surface.py

@@ -0,0 +1,231 @@
+from __future__ import annotations
+
+from argparse import Namespace
+from dataclasses import dataclass
+
+
+USER_DOMAIN = "user"
+BUILDER_DOMAIN = "builder"
+
+
+@dataclass(frozen=True, slots=True)
+class PublicToolSpec:
+    domain: str
+    tool_name: str
+    method_names: tuple[str, ...] = ()
+    cli_route: tuple[str, ...] | None = None
+    mcp_public: bool = True
+    cli_public: bool = True
+    has_contract: bool = False
+
+    @property
+    def trim_key(self) -> str:
+        return tool_key(self.domain, self.tool_name)
+
+
+def tool_key(domain: str, tool_name: str) -> str:
+    return f"{domain}:{tool_name}"
+
+
+USER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
+    PublicToolSpec(USER_DOMAIN, "auth_login", ("auth_login",), ("auth", "login")),
+    PublicToolSpec(USER_DOMAIN, "auth_use_token", ("auth_use_token",), ("auth", "use-token")),
+    PublicToolSpec(USER_DOMAIN, "auth_whoami", ("auth_whoami",), ("auth", "whoami")),
+    PublicToolSpec(USER_DOMAIN, "auth_logout", ("auth_logout",), ("auth", "logout")),
+    PublicToolSpec(USER_DOMAIN, "workspace_list", ("workspace_list",), ("workspace", "list")),
+    PublicToolSpec(USER_DOMAIN, "workspace_select", ("workspace_select",), ("workspace", "select")),
+    PublicToolSpec(USER_DOMAIN, "app_list", ("app_list",), ("app", "list")),
+    PublicToolSpec(USER_DOMAIN, "app_search", ("app_search",), ("app", "search")),
+    PublicToolSpec(USER_DOMAIN, "app_get", ("app_get",), ("app", "get")),
+    PublicToolSpec(USER_DOMAIN, "portal_list", ("portal_list",), ("portal", "list")),
+    PublicToolSpec(USER_DOMAIN, "portal_get", ("portal_get",), ("portal", "get")),
+    PublicToolSpec(USER_DOMAIN, "view_get", ("view_get",), ("view", "get")),
+    PublicToolSpec(USER_DOMAIN, "chart_get", ("chart_get",), ("chart", "get")),
+    PublicToolSpec(USER_DOMAIN, "file_get_upload_info", ("file_get_upload_info",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "file_upload_local", ("file_upload_local",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "feedback_submit", ("feedback_submit",), cli_public=False),
+    PublicToolSpec(
+        USER_DOMAIN,
+        "record_schema_get",
+        cli_route=("record", "schema", "applicant"),
+        mcp_public=False,
+    ),
+    PublicToolSpec(
+        USER_DOMAIN,
+        "record_browse_schema_get",
+        ("record_browse_schema_get_public",),
+        ("record", "schema", "browse"),
+    ),
+    PublicToolSpec(
+        USER_DOMAIN,
+        "record_insert_schema_get",
+        ("record_insert_schema_get_public",),
+        ("record", "schema", "insert"),
+    ),
+    PublicToolSpec(
+        USER_DOMAIN,
+        "record_update_schema_get",
+        ("record_update_schema_get_public",),
+        ("record", "schema", "update"),
+    ),
+    PublicToolSpec(USER_DOMAIN, "record_import_schema_get", ("record_import_schema_get",), ("record", "schema", "import")),
+    PublicToolSpec(
+        USER_DOMAIN,
+        "record_code_block_schema_get",
+        ("record_code_block_schema_get_public",),
+        ("record", "schema", "code-block"),
+    ),
+    PublicToolSpec(USER_DOMAIN, "record_member_candidates", ("record_member_candidates",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "record_department_candidates", ("record_department_candidates",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "record_analyze", ("record_analyze",), ("record", "analyze")),
+    PublicToolSpec(USER_DOMAIN, "record_list", ("record_list",), ("record", "list")),
+    PublicToolSpec(USER_DOMAIN, "record_get", ("record_get_public",), ("record", "get")),
+    PublicToolSpec(USER_DOMAIN, "record_insert", ("record_insert_public",), ("record", "insert")),
+    PublicToolSpec(USER_DOMAIN, "record_update", ("record_update_public",), ("record", "update")),
+    PublicToolSpec(USER_DOMAIN, "record_delete", ("record_delete_public",), ("record", "delete")),
+    PublicToolSpec(USER_DOMAIN, "record_import_template_get", ("record_import_template_get",), ("import", "template")),
+    PublicToolSpec(USER_DOMAIN, "record_import_verify", ("record_import_verify",), ("import", "verify")),
+    PublicToolSpec(USER_DOMAIN, "record_import_repair_local", ("record_import_repair_local",), ("import", "repair")),
+    PublicToolSpec(USER_DOMAIN, "record_import_start", ("record_import_start",), ("import", "start")),
+    PublicToolSpec(USER_DOMAIN, "record_import_status_get", ("record_import_status_get",), ("import", "status")),
+    PublicToolSpec(USER_DOMAIN, "record_code_block_run", ("record_code_block_run",), ("record", "code-block-run")),
+    PublicToolSpec(USER_DOMAIN, "task_list", ("task_list",), ("task", "list")),
+    PublicToolSpec(USER_DOMAIN, "task_get", ("task_get",), ("task", "get")),
+    PublicToolSpec(USER_DOMAIN, "task_save_only", ("task_save_only",), ("task", "save-only")),
+    PublicToolSpec(USER_DOMAIN, "task_action_execute", ("task_action_execute",), ("task", "action")),
+    PublicToolSpec(USER_DOMAIN, "task_associated_report_detail_get", ("task_associated_report_detail_get",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "task_workflow_log_get", ("task_workflow_log_get",), ("task", "log")),
+    PublicToolSpec(USER_DOMAIN, "directory_search", ("directory_search",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "directory_list_internal_users", ("directory_list_internal_users",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "directory_list_all_internal_users", ("directory_list_all_internal_users",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "directory_list_internal_departments", ("directory_list_internal_departments",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "directory_list_all_departments", ("directory_list_all_departments",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "directory_list_sub_departments", ("directory_list_sub_departments",), cli_public=False),
+    PublicToolSpec(USER_DOMAIN, "directory_list_external_members", ("directory_list_external_members",), cli_public=False),
+)
+
+
+BUILDER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
+    PublicToolSpec(BUILDER_DOMAIN, "auth_login", ("auth_login",), ("builder", "auth", "login"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "auth_use_token", ("auth_use_token",), ("builder", "auth", "use-token"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "auth_whoami", ("auth_whoami",), ("builder", "auth", "whoami"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "auth_logout", ("auth_logout",), ("builder", "auth", "logout"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "workspace_list", ("workspace_list",), ("builder", "workspace", "list"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "workspace_select", ("workspace_select",), ("builder", "workspace", "select"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "file_upload_local", ("file_upload_local",), ("builder", "file", "upload-local"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "feedback_submit", ("feedback_submit",), ("builder", "feedback", "submit"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "package_list", ("package_list",), ("builder", "package", "list"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "package_resolve", ("package_resolve",), ("builder", "package", "resolve"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "builder_tool_contract", ("builder_tool_contract",), ("builder", "contract"), has_contract=False),
+    PublicToolSpec(BUILDER_DOMAIN, "package_create", ("package_create",), ("builder", "package", "create"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "solution_install", ("solution_install",), ("builder", "solution", "install"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "member_search", ("member_search",), ("builder", "member", "search"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "role_search", ("role_search",), ("builder", "role", "search"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "role_create", ("role_create",), ("builder", "role", "create"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "package_attach_app", ("package_attach_app",), ("builder", "package", "attach-app"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_release_edit_lock_if_mine", ("app_release_edit_lock_if_mine",), ("builder", "app", "release-edit-lock-if-mine"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_resolve", ("app_resolve",), ("builder", "app", "resolve"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_custom_button_list", ("app_custom_button_list",), ("builder", "button", "list"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_custom_button_get", ("app_custom_button_get",), ("builder", "button", "get"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_custom_button_create", ("app_custom_button_create",), ("builder", "button", "create"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_custom_button_update", ("app_custom_button_update",), ("builder", "button", "update"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_custom_button_delete", ("app_custom_button_delete",), ("builder", "button", "delete"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_get", ("app_get",), ("builder", "app", "get", "summary"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_get_fields", ("app_get_fields",), ("builder", "app", "get", "fields"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_repair_code_blocks", ("app_repair_code_blocks",), ("builder", "app", "repair-code-blocks"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_get_layout", ("app_get_layout",), ("builder", "app", "get", "layout"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_get_views", ("app_get_views",), ("builder", "app", "get", "views"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_get_flow", ("app_get_flow",), ("builder", "app", "get", "flow"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_get_charts", ("app_get_charts",), ("builder", "app", "get", "charts"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "portal_list", ("portal_list",), ("builder", "portal", "list"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "portal_get", ("portal_get",), ("builder", "portal", "get"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "view_get", ("view_get",), ("builder", "view", "get"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "chart_get", ("chart_get",), ("builder", "chart", "get"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_schema_apply", ("app_schema_apply",), ("builder", "schema", "apply"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_layout_apply", ("app_layout_apply",), ("builder", "layout", "apply"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_flow_apply", ("app_flow_apply",), ("builder", "flow", "apply"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_views_apply", ("app_views_apply",), ("builder", "views", "apply"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_charts_apply", ("app_charts_apply",), ("builder", "charts", "apply"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "portal_apply", ("portal_apply",), ("builder", "portal", "apply"), has_contract=True),
+    PublicToolSpec(BUILDER_DOMAIN, "app_publish_verify", ("app_publish_verify",), ("builder", "publish", "verify"), has_contract=True),
+)
+
+
+ALL_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = USER_PUBLIC_TOOL_SPECS + BUILDER_PUBLIC_TOOL_SPECS
+PUBLIC_TOOL_BY_KEY: dict[str, PublicToolSpec] = {spec.trim_key: spec for spec in ALL_PUBLIC_TOOL_SPECS}
+PUBLIC_TOOL_BY_CLI_ROUTE: dict[tuple[str, ...], PublicToolSpec] = {
+    spec.cli_route: spec
+    for spec in ALL_PUBLIC_TOOL_SPECS
+    if spec.cli_public and spec.cli_route is not None
+}
+
+
+def public_tool_specs(domain: str | None = None) -> tuple[PublicToolSpec, ...]:
+    if domain is None:
+        return ALL_PUBLIC_TOOL_SPECS
+    return tuple(spec for spec in ALL_PUBLIC_TOOL_SPECS if spec.domain == domain)
+
+
+def public_mcp_tool_names(domain: str) -> set[str]:
+    return {spec.tool_name for spec in public_tool_specs(domain) if spec.mcp_public}
+
+
+def public_builder_contract_tool_names() -> list[str]:
+    return sorted(
+        spec.tool_name
+        for spec in BUILDER_PUBLIC_TOOL_SPECS
+        if spec.has_contract and (spec.mcp_public or spec.cli_public)
+    )
+
+
+def server_method_map(domain: str) -> dict[str, str]:
+    mapping: dict[str, str] = {}
+    for spec in public_tool_specs(domain):
+        if not spec.mcp_public:
+            continue
+        for method_name in spec.method_names:
+            mapping[method_name] = spec.trim_key
+    return mapping
+
+
+def cli_trim_key_from_namespace(args: Namespace) -> str | None:
+    route = cli_route_from_namespace(args)
+    if route is None:
+        return None
+    spec = PUBLIC_TOOL_BY_CLI_ROUTE.get(route)
+    return spec.trim_key if spec is not None else None
+
+
+def cli_route_from_namespace(args: Namespace) -> tuple[str, ...] | None:
+    command = getattr(args, "command", None)
+    if not isinstance(command, str) or not command:
+        return None
+    command = "builder" if command == "build" else command
+    if command == "record":
+        record_command = getattr(args, "record_command", None)
+        if record_command == "schema":
+            schema_command = getattr(args, "record_schema_command", None)
+            return (command, "schema", schema_command) if isinstance(schema_command, str) and schema_command else None
+        return (command, record_command) if isinstance(record_command, str) and record_command else None
+    if command == "task":
+        task_command = getattr(args, "task_command", None)
+        return (command, task_command) if isinstance(task_command, str) and task_command else None
+    if command != "builder":
+        child_attr = f"{command}_command"
+        child = getattr(args, child_attr, None)
+        return (command, child) if isinstance(child, str) and child else None
+
+    builder_command = getattr(args, "builder_command", None)
+    if not isinstance(builder_command, str) or not builder_command:
+        return None
+    if builder_command == "contract":
+        return ("builder", "contract")
+    if builder_command == "app":
+        app_command = getattr(args, "builder_app_command", None)
+        if app_command == "get":
+            section = getattr(args, "builder_app_get_section", "summary") or "summary"
+            return ("builder", "app", "get", str(section))
+        return ("builder", "app", app_command) if isinstance(app_command, str) and app_command else None
+    child_attr = f"builder_{builder_command.replace('-', '_')}_command"
+    child = getattr(args, child_attr, None)
+    return ("builder", builder_command, child) if isinstance(child, str) and child else None

package/src/qingflow_mcp/response_trim.py

@@ -5,11 +5,17 @@ from copy import deepcopy
 from functools import wraps
 from typing import Any, Callable
 
+from .public_surface import (
+    BUILDER_DOMAIN,
+    USER_DOMAIN,
+    cli_trim_key_from_namespace,
+    server_method_map,
+    tool_key,
+)
+
 
 JSONObject = dict[str, Any]
 TransformFn = Callable[[JSONObject], None]
-USER_DOMAIN = "user"
-BUILDER_DOMAIN = "builder"
 
 
 COMMON_SUCCESS_DROP_TOP = {
@@ -47,10 +53,6 @@ COMMON_ERROR_DROP_TOP = {
 SUCCESS_POLICY_BY_TOOL: dict[str, TransformFn] = {}
 
 
-def _tool_key(domain: str, tool_name: str) -> str:
-    return f"{domain}:{tool_name}"
-
-
 def trim_public_response(tool_name: str | None, payload: dict[str, Any]) -> dict[str, Any]:
     if not isinstance(payload, dict):
         return payload
@@ -100,248 +102,11 @@ def wrap_trimmed_methods(instance: object, method_map: dict[str, str]) -> object
 
 
 def resolve_cli_tool_name(args: Any) -> str | None:
-    command = getattr(args, "command", None)
-    if command == "auth":
-        return {
-            "login": _tool_key(USER_DOMAIN, "auth_login"),
-            "use-token": _tool_key(USER_DOMAIN, "auth_use_token"),
-            "whoami": _tool_key(USER_DOMAIN, "auth_whoami"),
-            "logout": _tool_key(USER_DOMAIN, "auth_logout"),
-        }.get(getattr(args, "auth_command", None))
-    if command == "workspace":
-        return {
-            "list": _tool_key(USER_DOMAIN, "workspace_list"),
-            "select": _tool_key(USER_DOMAIN, "workspace_select"),
-        }.get(getattr(args, "workspace_command", None))
-    if command == "app":
-        return {
-            "list": _tool_key(USER_DOMAIN, "app_list"),
-            "search": _tool_key(USER_DOMAIN, "app_search"),
-            "get": _tool_key(USER_DOMAIN, "app_get"),
-        }.get(getattr(args, "app_command", None))
-    if command == "portal":
-        return {
-            "list": _tool_key(USER_DOMAIN, "portal_list"),
-            "get": _tool_key(USER_DOMAIN, "portal_get"),
-        }.get(getattr(args, "portal_command", None))
-    if command == "view":
-        return {
-            "get": _tool_key(USER_DOMAIN, "view_get"),
-        }.get(getattr(args, "view_command", None))
-    if command == "chart":
-        return {
-            "get": _tool_key(USER_DOMAIN, "chart_get"),
-        }.get(getattr(args, "chart_command", None))
-    if command == "record":
-        record_command = getattr(args, "record_command", None)
-        if record_command == "schema":
-            return {
-                "applicant": _tool_key(USER_DOMAIN, "record_schema_get"),
-                "browse": _tool_key(USER_DOMAIN, "record_browse_schema_get"),
-                "insert": _tool_key(USER_DOMAIN, "record_insert_schema_get"),
-                "update": _tool_key(USER_DOMAIN, "record_update_schema_get"),
-                "import": _tool_key(USER_DOMAIN, "record_import_schema_get"),
-                "code-block": _tool_key(USER_DOMAIN, "record_code_block_schema_get"),
-            }.get(getattr(args, "record_schema_command", None))
-        return {
-            "list": _tool_key(USER_DOMAIN, "record_list"),
-            "get": _tool_key(USER_DOMAIN, "record_get"),
-            "insert": _tool_key(USER_DOMAIN, "record_insert"),
-            "update": _tool_key(USER_DOMAIN, "record_update"),
-            "delete": _tool_key(USER_DOMAIN, "record_delete"),
-            "analyze": _tool_key(USER_DOMAIN, "record_analyze"),
-            "code-block-run": _tool_key(USER_DOMAIN, "record_code_block_run"),
-        }.get(record_command)
-    if command == "import":
-        return {
-            "template": _tool_key(USER_DOMAIN, "record_import_template_get"),
-            "verify": _tool_key(USER_DOMAIN, "record_import_verify"),
-            "repair": _tool_key(USER_DOMAIN, "record_import_repair_local"),
-            "start": _tool_key(USER_DOMAIN, "record_import_start"),
-            "status": _tool_key(USER_DOMAIN, "record_import_status_get"),
-        }.get(getattr(args, "import_command", None))
-    if command == "task":
-        return {
-            "list": _tool_key(USER_DOMAIN, "task_list"),
-            "get": _tool_key(USER_DOMAIN, "task_get"),
-            "action": _tool_key(USER_DOMAIN, "task_action_execute"),
-            "log": _tool_key(USER_DOMAIN, "task_workflow_log_get"),
-        }.get(getattr(args, "task_command", None))
-    if command not in {"builder", "build"}:
-        return None
-    builder_command = getattr(args, "builder_command", None)
-    if builder_command == "file":
-        return {
-            "upload-local": _tool_key(BUILDER_DOMAIN, "file_upload_local"),
-        }.get(getattr(args, "builder_file_command", None))
-    if builder_command == "feedback":
-        return {
-            "submit": _tool_key(BUILDER_DOMAIN, "feedback_submit"),
-        }.get(getattr(args, "builder_feedback_command", None))
-    if builder_command == "contract":
-        return _tool_key(BUILDER_DOMAIN, "builder_tool_contract")
-    if builder_command == "member":
-        return {
-            "search": _tool_key(BUILDER_DOMAIN, "member_search"),
-        }.get(getattr(args, "builder_member_command", None))
-    if builder_command == "role":
-        return {
-            "search": _tool_key(BUILDER_DOMAIN, "role_search"),
-            "create": _tool_key(BUILDER_DOMAIN, "role_create"),
-        }.get(getattr(args, "builder_role_command", None))
-    if builder_command == "package":
-        return {
-            "list": _tool_key(BUILDER_DOMAIN, "package_list"),
-            "resolve": _tool_key(BUILDER_DOMAIN, "package_resolve"),
-            "create": _tool_key(BUILDER_DOMAIN, "package_create"),
-            "attach-app": _tool_key(BUILDER_DOMAIN, "package_attach_app"),
-        }.get(getattr(args, "builder_package_command", None))
-    if builder_command == "app":
-        app_command = getattr(args, "builder_app_command", None)
-        if app_command == "get":
-            return {
-                "summary": _tool_key(BUILDER_DOMAIN, "app_get"),
-                "fields": _tool_key(BUILDER_DOMAIN, "app_get_fields"),
-                "layout": _tool_key(BUILDER_DOMAIN, "app_get_layout"),
-                "views": _tool_key(BUILDER_DOMAIN, "app_get_views"),
-                "flow": _tool_key(BUILDER_DOMAIN, "app_get_flow"),
-                "charts": _tool_key(BUILDER_DOMAIN, "app_get_charts"),
-            }.get(getattr(args, "builder_app_get_section", "summary"))
-        return {
-            "resolve": _tool_key(BUILDER_DOMAIN, "app_resolve"),
-            "release-edit-lock-if-mine": _tool_key(BUILDER_DOMAIN, "app_release_edit_lock_if_mine"),
-            "repair-code-blocks": _tool_key(BUILDER_DOMAIN, "app_repair_code_blocks"),
-        }.get(app_command)
-    if builder_command == "button":
-        return {
-            "list": _tool_key(BUILDER_DOMAIN, "app_custom_button_list"),
-            "get": _tool_key(BUILDER_DOMAIN, "app_custom_button_get"),
-            "create": _tool_key(BUILDER_DOMAIN, "app_custom_button_create"),
-            "update": _tool_key(BUILDER_DOMAIN, "app_custom_button_update"),
-            "delete": _tool_key(BUILDER_DOMAIN, "app_custom_button_delete"),
-        }.get(getattr(args, "builder_button_command", None))
-    if builder_command == "portal":
-        return {
-            "list": _tool_key(BUILDER_DOMAIN, "portal_list"),
-            "get": _tool_key(BUILDER_DOMAIN, "portal_get"),
-            "apply": _tool_key(BUILDER_DOMAIN, "portal_apply"),
-        }.get(getattr(args, "builder_portal_command", None))
-    if builder_command == "view":
-        return {
-            "get": _tool_key(BUILDER_DOMAIN, "view_get"),
-        }.get(getattr(args, "builder_view_command", None))
-    if builder_command == "chart":
-        return {
-            "get": _tool_key(BUILDER_DOMAIN, "chart_get"),
-        }.get(getattr(args, "builder_chart_command", None))
-    if builder_command == "schema":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_schema_apply")}.get(getattr(args, "builder_schema_command", None))
-    if builder_command == "layout":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_layout_apply")}.get(getattr(args, "builder_layout_command", None))
-    if builder_command == "views":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_views_apply")}.get(getattr(args, "builder_views_command", None))
-    if builder_command == "flow":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_flow_apply")}.get(getattr(args, "builder_flow_command", None))
-    if builder_command == "charts":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_charts_apply")}.get(getattr(args, "builder_charts_command", None))
-    if builder_command == "publish":
-        return {"verify": _tool_key(BUILDER_DOMAIN, "app_publish_verify")}.get(getattr(args, "builder_publish_command", None))
-    return None
-
-
-USER_SERVER_METHOD_MAP = {
-    "auth_login": _tool_key(USER_DOMAIN, "auth_login"),
-    "auth_use_token": _tool_key(USER_DOMAIN, "auth_use_token"),
-    "auth_whoami": _tool_key(USER_DOMAIN, "auth_whoami"),
-    "auth_logout": _tool_key(USER_DOMAIN, "auth_logout"),
-    "workspace_list": _tool_key(USER_DOMAIN, "workspace_list"),
-    "workspace_select": _tool_key(USER_DOMAIN, "workspace_select"),
-    "app_list": _tool_key(USER_DOMAIN, "app_list"),
-    "app_search": _tool_key(USER_DOMAIN, "app_search"),
-    "app_get": _tool_key(USER_DOMAIN, "app_get"),
-    "portal_list": _tool_key(USER_DOMAIN, "portal_list"),
-    "portal_get": _tool_key(USER_DOMAIN, "portal_get"),
-    "view_get": _tool_key(USER_DOMAIN, "view_get"),
-    "chart_get": _tool_key(USER_DOMAIN, "chart_get"),
-    "file_get_upload_info": _tool_key(USER_DOMAIN, "file_get_upload_info"),
-    "file_upload_local": _tool_key(USER_DOMAIN, "file_upload_local"),
-    "feedback_submit": _tool_key(USER_DOMAIN, "feedback_submit"),
-    "record_import_schema_get": _tool_key(USER_DOMAIN, "record_import_schema_get"),
-    "record_import_template_get": _tool_key(USER_DOMAIN, "record_import_template_get"),
-    "record_import_verify": _tool_key(USER_DOMAIN, "record_import_verify"),
-    "record_import_repair_local": _tool_key(USER_DOMAIN, "record_import_repair_local"),
-    "record_import_start": _tool_key(USER_DOMAIN, "record_import_start"),
-    "record_import_status_get": _tool_key(USER_DOMAIN, "record_import_status_get"),
-    "record_insert_schema_get_public": _tool_key(USER_DOMAIN, "record_insert_schema_get"),
-    "record_member_candidates": _tool_key(USER_DOMAIN, "record_member_candidates"),
-    "record_department_candidates": _tool_key(USER_DOMAIN, "record_department_candidates"),
-    "record_analyze": _tool_key(USER_DOMAIN, "record_analyze"),
-    "record_list": _tool_key(USER_DOMAIN, "record_list"),
-    "record_get_public": _tool_key(USER_DOMAIN, "record_get"),
-    "record_browse_schema_get_public": _tool_key(USER_DOMAIN, "record_browse_schema_get"),
-    "record_update_schema_get_public": _tool_key(USER_DOMAIN, "record_update_schema_get"),
-    "record_insert_public": _tool_key(USER_DOMAIN, "record_insert"),
-    "record_update_public": _tool_key(USER_DOMAIN, "record_update"),
-    "record_delete_public": _tool_key(USER_DOMAIN, "record_delete"),
-    "record_code_block_schema_get_public": _tool_key(USER_DOMAIN, "record_code_block_schema_get"),
-    "record_code_block_run": _tool_key(USER_DOMAIN, "record_code_block_run"),
-    "task_list": _tool_key(USER_DOMAIN, "task_list"),
-    "task_get": _tool_key(USER_DOMAIN, "task_get"),
-    "task_action_execute": _tool_key(USER_DOMAIN, "task_action_execute"),
-    "task_associated_report_detail_get": _tool_key(USER_DOMAIN, "task_associated_report_detail_get"),
-    "task_workflow_log_get": _tool_key(USER_DOMAIN, "task_workflow_log_get"),
-    "directory_search": _tool_key(USER_DOMAIN, "directory_search"),
-    "directory_list_internal_users": _tool_key(USER_DOMAIN, "directory_list_internal_users"),
-    "directory_list_all_internal_users": _tool_key(USER_DOMAIN, "directory_list_all_internal_users"),
-    "directory_list_internal_departments": _tool_key(USER_DOMAIN, "directory_list_internal_departments"),
-    "directory_list_all_departments": _tool_key(USER_DOMAIN, "directory_list_all_departments"),
-    "directory_list_sub_departments": _tool_key(USER_DOMAIN, "directory_list_sub_departments"),
-    "directory_list_external_members": _tool_key(USER_DOMAIN, "directory_list_external_members"),
-}
+    return cli_trim_key_from_namespace(args)
 
-BUILDER_SERVER_METHOD_MAP = {
-    "auth_login": _tool_key(BUILDER_DOMAIN, "auth_login"),
-    "auth_use_token": _tool_key(BUILDER_DOMAIN, "auth_use_token"),
-    "auth_whoami": _tool_key(BUILDER_DOMAIN, "auth_whoami"),
-    "auth_logout": _tool_key(BUILDER_DOMAIN, "auth_logout"),
-    "workspace_list": _tool_key(BUILDER_DOMAIN, "workspace_list"),
-    "workspace_select": _tool_key(BUILDER_DOMAIN, "workspace_select"),
-    "file_upload_local": _tool_key(BUILDER_DOMAIN, "file_upload_local"),
-    "feedback_submit": _tool_key(BUILDER_DOMAIN, "feedback_submit"),
-    "package_list": _tool_key(BUILDER_DOMAIN, "package_list"),
-    "package_resolve": _tool_key(BUILDER_DOMAIN, "package_resolve"),
-    "builder_tool_contract": _tool_key(BUILDER_DOMAIN, "builder_tool_contract"),
-    "package_create": _tool_key(BUILDER_DOMAIN, "package_create"),
-    "member_search": _tool_key(BUILDER_DOMAIN, "member_search"),
-    "role_search": _tool_key(BUILDER_DOMAIN, "role_search"),
-    "role_create": _tool_key(BUILDER_DOMAIN, "role_create"),
-    "package_attach_app": _tool_key(BUILDER_DOMAIN, "package_attach_app"),
-    "app_release_edit_lock_if_mine": _tool_key(BUILDER_DOMAIN, "app_release_edit_lock_if_mine"),
-    "app_resolve": _tool_key(BUILDER_DOMAIN, "app_resolve"),
-    "app_custom_button_list": _tool_key(BUILDER_DOMAIN, "app_custom_button_list"),
-    "app_custom_button_get": _tool_key(BUILDER_DOMAIN, "app_custom_button_get"),
-    "app_custom_button_create": _tool_key(BUILDER_DOMAIN, "app_custom_button_create"),
-    "app_custom_button_update": _tool_key(BUILDER_DOMAIN, "app_custom_button_update"),
-    "app_custom_button_delete": _tool_key(BUILDER_DOMAIN, "app_custom_button_delete"),
-    "app_get": _tool_key(BUILDER_DOMAIN, "app_get"),
-    "app_get_fields": _tool_key(BUILDER_DOMAIN, "app_get_fields"),
-    "app_repair_code_blocks": _tool_key(BUILDER_DOMAIN, "app_repair_code_blocks"),
-    "app_get_layout": _tool_key(BUILDER_DOMAIN, "app_get_layout"),
-    "app_get_views": _tool_key(BUILDER_DOMAIN, "app_get_views"),
-    "app_get_flow": _tool_key(BUILDER_DOMAIN, "app_get_flow"),
-    "app_get_charts": _tool_key(BUILDER_DOMAIN, "app_get_charts"),
-    "portal_list": _tool_key(BUILDER_DOMAIN, "portal_list"),
-    "portal_get": _tool_key(BUILDER_DOMAIN, "portal_get"),
-    "view_get": _tool_key(BUILDER_DOMAIN, "view_get"),
-    "chart_get": _tool_key(BUILDER_DOMAIN, "chart_get"),
-    "app_schema_apply": _tool_key(BUILDER_DOMAIN, "app_schema_apply"),
-    "app_layout_apply": _tool_key(BUILDER_DOMAIN, "app_layout_apply"),
-    "app_flow_apply": _tool_key(BUILDER_DOMAIN, "app_flow_apply"),
-    "app_views_apply": _tool_key(BUILDER_DOMAIN, "app_views_apply"),
-    "app_charts_apply": _tool_key(BUILDER_DOMAIN, "app_charts_apply"),
-    "portal_apply": _tool_key(BUILDER_DOMAIN, "portal_apply"),
-    "app_publish_verify": _tool_key(BUILDER_DOMAIN, "app_publish_verify"),
-}
+
+USER_SERVER_METHOD_MAP = server_method_map(USER_DOMAIN)
+BUILDER_SERVER_METHOD_MAP = server_method_map(BUILDER_DOMAIN)
 
 
 def _wrap_callable(original: Callable[..., Any], tool_name: str) -> Callable[..., Any]:
@@ -602,7 +367,7 @@ def _trim_builder_list_like(payload: JSONObject) -> None:
 def _register_policy(domains: tuple[str, ...], names: tuple[str, ...], transform: TransformFn) -> None:
     for domain in domains:
         for name in names:
-            SUCCESS_POLICY_BY_TOOL[_tool_key(domain, name)] = transform
+            SUCCESS_POLICY_BY_TOOL[tool_key(domain, name)] = transform
 
 
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("auth_login", "auth_use_token", "auth_whoami"), _trim_auth_payload)
@@ -648,6 +413,7 @@ _register_policy(
     (USER_DOMAIN,),
     (
         "task_get",
+        "task_save_only",
         "task_action_execute",
         "task_associated_report_detail_get",
         "task_workflow_log_get",
@@ -683,6 +449,7 @@ _register_policy(
         "package_list",
         "package_resolve",
         "builder_tool_contract",
+        "solution_install",
         "package_create",
         "member_search",
         "role_search",

package/src/qingflow_mcp/server_app_user.py

@@ -117,6 +117,7 @@ Analysis answers must include concrete numbers. When applicable, include percent
 
 - Read relation targets from `record_insert_schema_get` / `record_update_schema_get` relation metadata before preparing relation writes.
 - Member and department fields may be written with natural strings directly on `record_insert` / `record_update`; only fall back to `record_member_candidates` or `record_department_candidates` when the user wants explicit candidate browsing or the write returns ambiguity that needs confirmation.
+- When candidate browsing must match a real update/write scope, pass `record_id`, `workflow_node_id`, and any pending `fields` context to the candidate tool; otherwise the candidate result is only a static applicant-node preview.
 - If explicit candidate browsing is needed for default-all member or department fields, prefer those field candidate tools instead of starting with `directory_*`.
 
 ## Code Block Path
@@ -143,11 +144,14 @@ Use `record_code_block_run` when the user wants to execute a form code-block fie
 
 ## Task Workflow Path
 
-`task_list -> task_get -> task_action_execute`
+`task_list -> task_get -> task_save_only / task_action_execute`
 
 - Use `task_associated_report_detail_get` for associated view or report details.
 - Use `task_workflow_log_get` for full workflow log history.
 - Task actions operate on `app_key + record_id + workflow_node_id`, not `task_id`.
+- Treat `task_action_execute` as the tool-level action enum surface; the current task's real actions are only the ones listed in `task_get.capabilities.available_actions`.
+- Use `task_save_only` when the user wants to save editable field changes on the current node without advancing the workflow.
+- `save_only` is exposed only when the backend current-node `editableQueIds` signal returns a non-empty result; MCP no longer infers `save_only` from local schema reconstruction.
 
 ## Time Handling