@oneentry/mcp-platform-server 0.1.3 → 0.1.5

package/dist/api/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/api/audit.ts"],"names":[],"mappings":"AAGA,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,QAAQ,GAAG,eAAe,GAAG,MAAM,CAAC;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAElB,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAKnD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAItC;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI;CAWrD"}

package/dist/api/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/api/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAezC;;;;GAIG;AACH,MAAM,OAAO,QAAQ;IACF,IAAI,CAAqB;IACzB,IAAI,CAAS;IAE9B,YAAY,MAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAa;QAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAsC;QAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;CACF"}

package/dist/api/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/api/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,gEAAgE;AAChE,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oEAAoE;AACpE,qBAAa,SAAU,SAAQ,KAAK;CAAG;AAevC,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,MAQhD,CAAC;AAEF;;;;GAIG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;gBAE9B,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE;IASpF,8CAA8C;IAC9C,IAAI,YAAY,IAAI,OAAO,CAI1B;YAEa,IAAI;IAuBlB,OAAO,CAAC,MAAM,CAAC,QAAQ;IAgBvB,8DAA8D;IACxD,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAkBpC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CAgBjC;AAED,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,WAIrD,CAAC"}

package/dist/api/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/api/auth.ts"],"names":[],"mappings":"AAsBA,oEAAoE;AACpE,MAAM,OAAO,SAAU,SAAQ,KAAK;CAAG;AAEvC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAA2B,EAAE;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChG,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAU,EAAE;IACxD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,UAAU;IACb,IAAI,CAAwB;IACnB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,WAAW,CAAc;IAE1C,YAAY,MAAwE;QAClF,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,IAAI,YAAY;QACd,OAAO,OAAO,CACZ,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAChF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAa;QAC5C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB;;;;eAIG;YACH,MAAM,IAAI,GACR,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACrB,CAAC,CAAC,0IAA0I;gBAC5I,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,gBAAgB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,GAAY;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,WAAW;YACX,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;SACnE,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,CAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YAC7B,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;YAC7B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;SACpC,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;gBACpF,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC"}

package/dist/api/build-catalog.d.ts

@@ -7,4 +7,5 @@ export declare const buildCatalog: (params: {
     rawSwagger: string;
     permissions: PermissionMap;
     builtAt: string;
+    sourceUrl?: string;
 }) => Catalog;

package/dist/api/build-catalog.js

@@ -1,24 +1,69 @@
 import { createHash } from 'node:crypto';
 import { capSchema, normalizeSchema } from './normalize-schema.js';
+import { ALWAYS_CONFIRM_PREFIXES, OPERATION_NOTES } from './operation-notes.js';
 const API_PREFIX = '/api/admin';
 const METHODS = ['get', 'post', 'put', 'patch', 'delete'];
-const ALWAYS_CONFIRM = [
-    /^\/immutable-settings/,
-    /^\/admins/,
-    /^\/backups/,
-    /^\/modules/,
-    /^\/payments\/webhook/,
-    /^\/auth\/logout\/all-users/,
-    /^\/settings-general/,
-    /^\/system\/captcha-keys/,
-];
-const riskOf = (method) => {
+const ALWAYS_CONFIRM = ALWAYS_CONFIRM_PREFIXES.map((prefix) => new RegExp(`^${prefix.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`));
+const isGated = (path) => ALWAYS_CONFIRM.some((pattern) => pattern.test(path));
+const riskOf = (method, opId, path) => {
     if (method === 'get') {
         return 'read';
     }
+    if (method === 'post' && OPERATION_NOTES[opId]?.readOnly === true && !isGated(path)) {
+        return 'read';
+    }
     return method === 'delete' ? 'destructive' : 'write';
 };
 const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const jsonTypeOf = (value) => {
+    if (value === null) {
+        return 'null';
+    }
+    if (Array.isArray(value)) {
+        return 'array';
+    }
+    if (typeof value === 'number') {
+        return Number.isInteger(value) ? 'integer' : 'number';
+    }
+    return typeof value;
+};
+const typeFits = (declared, actual) => declared === actual ||
+    (declared === 'number' && actual === 'integer') ||
+    (declared === 'integer' && actual === 'number');
+const markExampleMismatch = (schema, field) => {
+    if (schema['x-loose'] === true || schema.example === undefined || schema.type === undefined) {
+        return undefined;
+    }
+    const actual = jsonTypeOf(schema.example);
+    if (!typeFits(schema.type, actual)) {
+        const message = `declared "${schema.type}", example is ${actual}`;
+        schema['x-example-mismatch'] = message;
+        return `${field} (${message})`;
+    }
+    if (schema.type === 'array' && schema.items?.type !== undefined && schema.items['x-loose'] !== true) {
+        const first = schema.example[0];
+        if (first !== undefined && !typeFits(schema.items.type, jsonTypeOf(first))) {
+            const message = `items declared "${schema.items.type}", example items are ${jsonTypeOf(first)}`;
+            schema['x-example-mismatch'] = message;
+            return `${field} (${message})`;
+        }
+    }
+    return undefined;
+};
+const exampleMismatches = (body) => {
+    const properties = body?.schema.properties;
+    if (!properties) {
+        return [];
+    }
+    const found = [];
+    for (const [name, schema] of Object.entries(properties)) {
+        const mismatch = markExampleMismatch(schema, name);
+        if (mismatch) {
+            found.push(mismatch);
+        }
+    }
+    return found;
+};
 const asString = (value) => typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
 const responseSummary = (responses) => {
     if (!isRecord(responses)) {
@@ -60,6 +105,21 @@ const buildParams = (raw, components) => {
     }
     return params;
 };
+const bodyExample = (media) => {
+    if (media['example'] !== undefined) {
+        return media['example'];
+    }
+    const examples = media['examples'];
+    if (!isRecord(examples)) {
+        return undefined;
+    }
+    for (const entry of Object.values(examples)) {
+        if (isRecord(entry) && entry['value'] !== undefined) {
+            return entry['value'];
+        }
+    }
+    return undefined;
+};
 const buildBody = (raw, components) => {
     if (!isRecord(raw)) {
         return undefined;
@@ -76,9 +136,18 @@ const buildBody = (raw, components) => {
     if (!isRecord(media)) {
         return undefined;
     }
+    const schema = capSchema(normalizeSchema(media['schema'], components));
+    const example = bodyExample(media);
+    if (example !== undefined && schema.example === undefined) {
+        schema.example = example;
+    }
+    const description = asString(raw['description']);
+    if (description && schema['x-unresolved'] === true) {
+        schema.description = description.replace(/\s+/g, ' ').slice(0, 240);
+    }
     return {
         contentType,
-        schema: capSchema(normalizeSchema(media['schema'], components)),
+        schema,
         required: raw['required'] === true,
     };
 };
@@ -96,6 +165,8 @@ export const buildCatalog = (params) => {
     const operations = [];
     const foreignPaths = [];
     const withoutOpId = [];
+    const unresolvedBodies = [];
+    const contradictoryExamples = [];
     for (const [fullPath, pathItem] of Object.entries(swagger['paths'])) {
         if (!isRecord(pathItem)) {
             continue;
@@ -118,9 +189,18 @@ export const buildCatalog = (params) => {
             const tags = operation['tags'];
             const tag = (Array.isArray(tags) ? asString(tags[0]) : undefined) ?? 'Other';
             const summary = asString(operation['summary']) ?? asString(operation['description']) ?? '';
-            const risk = riskOf(method);
-            const alwaysConfirm = method !== 'get' && ALWAYS_CONFIRM.some((pattern) => pattern.test(path));
+            const risk = riskOf(method, opId, path);
+            const alwaysConfirm = method !== 'get' && isGated(path);
             const permission = byOpId[opId];
+            const body = buildBody(operation['requestBody'], components);
+            if (body?.schema['x-unresolved'] === true) {
+                unresolvedBodies.push(body.schema.example === undefined ? `${opId} (no example)` : opId);
+            }
+            const mismatches = exampleMismatches(body);
+            if (mismatches.length > 0) {
+                contradictoryExamples.push(`${opId}: ${mismatches.join('; ')}`);
+            }
+            const notes = OPERATION_NOTES[opId];
             const entry = {
                 opId,
                 method,
@@ -132,12 +212,13 @@ export const buildCatalog = (params) => {
                 risk,
                 alwaysConfirm,
                 params: buildParams(operation['parameters'], components),
-                ...(buildBody(operation['requestBody'], components)
-                    ? { body: buildBody(operation['requestBody'], components) }
-                    : {}),
+                ...(body ? { body } : {}),
                 ...(responseSummary(operation['responses'])
                     ? { responseSummary: responseSummary(operation['responses']) }
                     : {}),
+                ...(notes?.note ? { note: notes.note } : {}),
+                ...(notes?.verifyWith ? { verifyWith: notes.verifyWith } : {}),
+                ...(notes?.silentNoOp ? { silentNoOp: notes.silentNoOp } : {}),
                 searchText: '',
             };
             entry.searchText = [opId, method.toUpperCase(), path, tag, summary, permission ?? '']
@@ -156,14 +237,45 @@ export const buildCatalog = (params) => {
         warnings.push(`${String(withoutOpId.length)} operation(s) have no operationId and cannot be called ` +
             `(e.g. ${withoutOpId.slice(0, 3).join(', ')}). Report it against the CMS.`);
     }
+    if (unresolvedBodies.length > 0) {
+        warnings.push(`${String(unresolvedBodies.length)} operation(s) declare a request body whose schema ` +
+            `does not resolve in the document (${unresolvedBodies.slice(0, 5).join(', ')}). ` +
+            'Their body schema is marked "x-unresolved": true — build the body from the example ' +
+            'cms_api_describe returns, and never from the empty schema. Report it against the CMS.');
+    }
+    if (contradictoryExamples.length > 0) {
+        warnings.push(`${String(contradictoryExamples.length)} field(s) carry an example that contradicts their ` +
+            `own declared type (${contradictoryExamples.slice(0, 3).join(' | ')}). ` +
+            'Those fields are marked "x-example-mismatch" and listed by cms_api_describe — ' +
+            'copy the example, not the type. Report it against the CMS.');
+    }
+    const noted = Object.keys(OPERATION_NOTES);
+    const notedButAbsent = noted.filter((opId) => !operations.some((operation) => operation.opId === opId));
+    if (notedButAbsent.length > 0 && notedButAbsent.length <= noted.length / 2) {
+        warnings.push(`${String(notedButAbsent.length)} operation(s) carry a curated behaviour note but are ` +
+            `absent from this catalog (${notedButAbsent.slice(0, 5).join(', ')}). ` +
+            'Either this instance does not expose them, or the note table has gone stale — ' +
+            'the note is not shown for an operation that is not there.');
+    }
     const known = new Set(operations.map((o) => o.opId));
     const missing = Object.keys(byOpId).filter((opId) => !known.has(opId) && !opId.startsWith('Developer') && !opId.startsWith('Content'));
     if (missing.length > 0) {
+        const isFiltered = missing.length > Object.keys(byOpId).length / 2;
         warnings.push(`${String(missing.length)} admin operation(s) declare a permission but are absent from the ` +
-            `instance's API document (e.g. ${missing.slice(0, 3).join(', ')}). The bundled permission ` +
-            'map was generated from a different platform revision than this instance runs — update ' +
-            'the package if the catalog looks incomplete.');
+            `document served by ${params.sourceUrl ?? "the instance's API document"} ` +
+            `(e.g. ${missing.slice(0, 3).join(', ')}). ` +
+            (isFiltered
+                ? 'Most of the Admin API is missing, so that URL is serving the operation subset ' +
+                    'whitelisted for the workflow "admin-api" node rather than the whole API. The ' +
+                    'complete document is published by the instance itself at the base URL with ' +
+                    '"-json" appended, but only while it runs with CORS_MODE=DEV. Until this ' +
+                    'instance supports the "full" parameter on the node endpoint, expect the ' +
+                    'catalog to cover only a fraction of the endpoints that exist.'
+                : 'The bundled permission map was generated from a different platform revision than ' +
+                    'this instance runs — update the package if the catalog looks incomplete.'));
     }
+    const mappedPermissions = new Set(Object.values(byOpId));
+    const permissionsWithoutOperation = permissions.filter((permission) => !mappedPermissions.has(permission));
     const knownPermissions = new Set(permissions);
     const orphanPermissions = [
         ...new Set(operations
@@ -182,6 +294,7 @@ export const buildCatalog = (params) => {
         swaggerHash: createHash('sha256').update(rawSwagger).digest('hex').slice(0, 16),
         permissions,
         warnings,
+        coverage: { unexposedOpIds: missing, permissionsWithoutOperation },
         operations,
     };
 };

package/dist/api/catalog.d.ts

@@ -11,17 +11,22 @@ export interface OperationHit {
     risk: Operation['risk'];
     score: number;
 }
+export interface StartupAuth {
+    bearer?: string;
+    error?: string;
+}
 export declare class OperationCatalog {
     private byOpId;
     catalog: Catalog;
     constructor(catalog: Catalog);
     static permissionMap(): PermissionMap;
-    static resolve(config: Config, bearer?: string): Promise<OperationCatalog>;
+    static resolve(config: Config, auth?: StartupAuth): Promise<OperationCatalog>;
     get isEmpty(): boolean;
     adopt(other: OperationCatalog): void;
     get(opId: string): Operation | undefined;
     operations(): readonly Operation[];
     suggest(opId: string, limit?: number): string[];
+    unexposedMatches(query: string, limit?: number): string[];
     search(params: {
         query: string;
         tag?: string;

package/dist/api/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/api/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAErD,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAEd,OAAO,EAAE,OAAO;IAS5B,MAAM,CAAC,IAAI,IAAI,gBAAgB;IAK/B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIxC,UAAU,IAAI,SAAS,SAAS,EAAE;IAIlC;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,MAAM,EAAE;IAU1C,MAAM,CAAC,MAAM,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,YAAY,EAAE;CA+CnB"}

package/dist/api/catalog.js

@@ -2,7 +2,25 @@ import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { dataDir } from '../knowledge/loader.js';
 import { buildCatalog } from './build-catalog.js';
-import { fetchSwagger } from './swagger-source.js';
+import { fetchSwagger, nestSwaggerUrl, nodeSwaggerUrl, } from './swagger-source.js';
+const loginWarning = (error) => `The startup login failed, so the API document was requested without a token: ${error}`;
+const sourceWarnings = (swagger, auth) => {
+    const warnings = [];
+    const why = swagger.failures.length > 0 ? ` (${swagger.failures.join('; ')})` : '';
+    if (swagger.origin === 'cache') {
+        warnings.push(`Neither API document could be read${why}; this catalog came from the on-disk cache ` +
+            'and may not match the API that is actually running.');
+    }
+    if (swagger.origin === 'instance-node') {
+        warnings.push(`${swagger.url} serves only the operations whitelisted for the workflow "admin-api" ` +
+            'node, not the whole Admin API, so this catalog is a small subset of the endpoints ' +
+            `that exist. The complete document was not available${why}.`);
+    }
+    if (auth.error !== undefined) {
+        warnings.push(loginWarning(auth.error));
+    }
+    return warnings;
+};
 export class OperationCatalog {
     byOpId;
     catalog;
@@ -10,7 +28,11 @@ export class OperationCatalog {
         if (catalog.version !== 1) {
             throw new Error(`Unsupported catalog version ${String(catalog.version)}`);
         }
-        this.catalog = { ...catalog, warnings: catalog.warnings ?? [] };
+        this.catalog = {
+            ...catalog,
+            warnings: catalog.warnings ?? [],
+            coverage: catalog.coverage ?? { unexposedOpIds: [], permissionsWithoutOperation: [] },
+        };
         this.byOpId = new Map(catalog.operations.map((o) => [o.opId, o]));
     }
     static permissionMap() {
@@ -18,30 +40,25 @@ export class OperationCatalog {
         const parsed = JSON.parse(readFileSync(file, 'utf8'));
         return { byOpId: parsed.byOpId, permissions: parsed.permissions };
     }
-    static async resolve(config, bearer) {
+    static async resolve(config, auth = {}) {
         const builtAt = new Date().toISOString();
         try {
             const swagger = await fetchSwagger({
                 baseUrl: config.baseUrl,
                 cacheDir: config.cacheDir,
                 timeoutMs: config.requestTimeoutMs,
-                ...(bearer ? { bearer } : {}),
+                ...(auth.bearer ? { bearer: auth.bearer } : {}),
             });
             const catalog = buildCatalog({
                 rawSwagger: swagger.raw,
                 permissions: OperationCatalog.permissionMap(),
                 builtAt,
+                sourceUrl: swagger.url,
+            });
+            return new OperationCatalog({
+                ...catalog,
+                warnings: [...catalog.warnings, ...sourceWarnings(swagger, auth)],
             });
-            return new OperationCatalog(swagger.origin === 'cache'
-                ? {
-                    ...catalog,
-                    warnings: [
-                        ...catalog.warnings,
-                        `The instance at ${config.baseUrl} was unreachable; this catalog came from the ` +
-                            'on-disk cache and may not match the API that is actually running.',
-                    ],
-                }
-                : catalog);
         }
         catch (error) {
             return new OperationCatalog({
@@ -51,10 +68,13 @@ export class OperationCatalog {
                 swaggerHash: '',
                 permissions: [],
                 warnings: [
-                    `The operation catalog is EMPTY: ${config.baseUrl} did not serve its API document ` +
-                        `(${error instanceof Error ? error.message : String(error)}). ` +
-                        'No API operation can be searched or called until the instance is reachable.',
+                    `The operation catalog is EMPTY: ${error instanceof Error ? error.message : String(error)}. ` +
+                        'No API operation can be searched or called until either ' +
+                        `${nestSwaggerUrl(config.baseUrl)} or ${nodeSwaggerUrl(config.baseUrl)} ` +
+                        'answers 200 with an OpenAPI document.',
+                    ...(auth.error === undefined ? [] : [loginWarning(auth.error)]),
                 ],
+                coverage: { unexposedOpIds: [], permissionsWithoutOperation: [] },
                 operations: [],
             });
         }
@@ -81,6 +101,22 @@ export class OperationCatalog {
             .slice(0, limit)
             .map((entry) => entry.opId);
     }
+    unexposedMatches(query, limit = 5) {
+        const terms = query
+            .toLowerCase()
+            .split(/[\s/.]+/)
+            .filter((term) => term.length > 2);
+        if (terms.length === 0) {
+            return [];
+        }
+        const { unexposedOpIds, permissionsWithoutOperation } = this.catalog.coverage;
+        return [...unexposedOpIds, ...permissionsWithoutOperation]
+            .filter((name) => {
+            const haystack = name.toLowerCase();
+            return terms.some((term) => haystack.includes(term));
+        })
+            .slice(0, limit);
+    }
     search(params) {
         const terms = params.query
             .toLowerCase()

package/dist/api/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/api/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAejD;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAyB;IACvC,OAAO,CAAU;IAE1B,YAAY,OAAgB;QAC1B,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,mFAAmF;QACnF,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,CAAC,IAAI;QACT,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;QAChD,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC,CAAC;IACjF,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU;aAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;aAC5E,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aACjC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,MAMN;QACC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;aACvB,WAAW,EAAE;aACb,KAAK,CAAC,SAAS,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAmB,EAAE,CAAC;QAEhC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtE,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;gBACrF,SAAS;YACX,CAAC;YAED,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;gBACD,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;gBACD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;YACH,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE;oBACtC,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,GAAG,EAAE,SAAS,CAAC,GAAG;oBAClB,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE;IAC/C,MAAM,KAAK,GAAG,CAAC,KAAa,EAAe,EAAE;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;AACpD,CAAC,CAAC"}

package/dist/api/client.d.ts

@@ -21,6 +21,7 @@ export type CallResult = {
 export declare class RequestBuildError extends Error {
 }
 export declare const normalizeBody: (body: unknown) => unknown;
+export declare const unsupportedBodyFormat: (operation: Operation) => string | undefined;
 export declare const buildUrl: (baseUrl: string, operation: Operation, args: CallArgs) => string;
 export declare class AdminApiClient {
     private readonly baseUrl;

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC;AAE1C,2DAA2D;AAC3D,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,OAAO,KAAG,OAc7C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GACnB,SAAS,MAAM,EACf,WAAW,SAAS,EACpB,MAAM,QAAQ,KACb,MAkCF,CAAC;AAqDF;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAMxE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAiDrE,8EAA8E;IACxE,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAyB3D"}

package/dist/api/client.js

@@ -16,6 +16,15 @@ export const normalizeBody = (body) => {
         return body;
     }
 };
+export const unsupportedBodyFormat = (operation) => {
+    const contentType = operation.body?.contentType;
+    if (contentType === undefined || /^application\/(\w[\w.+-]*\+)?json$/.test(contentType)) {
+        return undefined;
+    }
+    return (`Operation ${operation.opId} expects a "${contentType}" request body, and this server ` +
+        'can only send application/json. The call is not executable through MCP — no body ' +
+        'shape will help. Report it to the human and use another route to that instance.');
+};
 export const buildUrl = (baseUrl, operation, args) => {
     let path = operation.path;
     const provided = args.path ?? {};

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAsBA,2DAA2D;AAC3D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAa,EAAW,EAAE;IACtD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,OAAe,EACf,SAAoB,EACpB,IAAc,EACN,EAAE;IACV,IAAI,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,iBAAiB,CACzB,2BAA2B,KAAK,CAAC,IAAI,SAAS,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,KAAK;gBAClF,mBAAmB,KAAK,CAAC,IAAI,GAAG,CACnC,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,SAAS,CAAC,IAAI,+BAA+B;YACvF,8DAA8D,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;AACtC,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,SAAoB,EAAsB,EAAE;IAC3E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;QACzD,OAAO,CACL,oCAAoC,KAAK,CAAC,CAAC,CAAC,4FAA4F,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/I,QAAQ,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC,UAAU;YACzB,CAAC,CAAC,oBAAoB,SAAS,CAAC,UAAU,+CAA+C;YACzF,CAAC,CAAC,yGAAyG,CAAC;IAChH,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,kGAAkG,CAAC;IAC5G,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,qEAAqE,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAkB,EAAoB,EAAE;IAC9D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAa,EAAE,QAAgB,EAAU,EAAE;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAI,IAAgC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,OAAO,CAAS;IAChB,MAAM,CAAa;IACnB,SAAS,CAAS;IAEnC,YAAY,MAAkE;QAC5E,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAoB,EAAE,IAAc;QAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,KAAK,EAAE,KAAa,EAAqB,EAAE;YACtD,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;YAC7E,IAAI,OAA2B,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC1D,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE;gBACtC,OAAO;gBACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,cAAc,GAAG,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;oBAC9F,IAAI,EAAE,0FAA0F;iBACjG;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACjD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1B;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;gBACxE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,WAAW,GACf,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;gBACvC,CAAC,CAAE,IAAgC,CAAC,aAAa,CAAC;gBAClD,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC5D,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,WAAsC,CAAC;iBAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/api/normalize-schema.js

@@ -36,7 +36,12 @@ export const normalizeSchema = (node, components, depth = 0, refStack = []) => {
         }
         const target = components[name];
         if (target === undefined) {
-            return { type: 'object', description: `(unresolved ${name})` };
+            return {
+                type: 'object',
+                description: `(unresolved ${name})`,
+                'x-loose': true,
+                'x-unresolved': true,
+            };
         }
         return normalizeSchema(target, components, depth, [...refStack, name]);
     }

package/dist/api/operation-notes.d.ts

@@ -0,0 +1,10 @@
+import type { VerifyWith } from './types.js';
+export interface OperationNote {
+    note?: string;
+    verifyWith?: VerifyWith;
+    silentNoOp?: string;
+    readOnly?: true;
+}
+export declare const ALWAYS_CONFIRM_PREFIXES: readonly string[];
+export declare const OPERATION_NOTES: Readonly<Record<string, OperationNote>>;
+export declare const readOnlyOpIds: () => string[];

package/dist/api/operation-notes.js

@@ -0,0 +1,146 @@
+export const ALWAYS_CONFIRM_PREFIXES = [
+    '/immutable-settings',
+    '/admins',
+    '/backups',
+    '/modules',
+    '/payments/webhook',
+    '/auth/logout/all-users',
+    '/settings-general',
+    '/system/captcha-keys',
+];
+export const OPERATION_NOTES = {
+    AdminProductsController_findAll: {
+        readOnly: true,
+        note: 'Pagination and locale are query parameters, not body fields: pass limit, offset and ' +
+            'langCode in "query". The body is an ARRAY of filter objects — send [] for no filter. ' +
+            'A body of { limit, offset, langCode } answers 400 complaining about langCode, because ' +
+            'the validator is describing the query parameter you did not send.',
+    },
+    AdminProductsController_setStatusForProducts: {
+        silentNoOp: 'The status id goes in "id", not "statusId". With "statusId" the handler reads ' +
+            'undefined, writes NULL over the product status and still answers 201 true. The call ' +
+            'also never re-indexes, so even a correct write stays invisible to ' +
+            'AdminProductsController_findAll. Setting statusId through ' +
+            'AdminProductsController_update is the route that works today.',
+        verifyWith: {
+            opId: 'AdminProductsController_findOne',
+            check: 'statusId',
+            why: 'the call answers 201 true whether or not any row changed',
+        },
+    },
+    AdminAttributesSetsController_create: {
+        note: 'Inside an attribute, "validators", "localizeInfos" and "listTitles" are keyed by ' +
+            'locale first: validators.en_US.requiredValidator, not validators.requiredValidator. ' +
+            'A flat map is stored verbatim and read by nobody.',
+        verifyWith: {
+            opId: 'AdminAttributesSetsController_findOne',
+            check: 'schema[].validators.<locale>',
+            why: 'the raw set shows exactly what you wrote, including a flat map that no consumer reads',
+        },
+    },
+    AdminAttributesSetsController_update: {
+        note: 'Inside an attribute, "validators", "localizeInfos" and "listTitles" are keyed by ' +
+            'locale first. A flat map is accepted and stored where nothing reads it.',
+        verifyWith: {
+            opId: 'AdminAttributesSetsController_findOne',
+            check: 'schema[].validators.<locale>',
+            why: 'the raw set shows what you wrote; the projection a site reads shows what it gets',
+        },
+    },
+    AdminAttributesSetsController_updateSchema: {
+        note: 'The body is the schema object itself, never wrapped as { "schema": … }. The wrapped ' +
+            'form answers 200 and replaces the set with a single attribute called "schema". ' +
+            'Locale-keyed rules apply here too.',
+        verifyWith: {
+            opId: 'AdminAttributesSetsController_findOne',
+            check: 'schema[].validators.<locale>',
+            why: 'a wrapped or flat body answers 200 and destroys or discards what you sent',
+        },
+    },
+    AdminFileUploadController_uploadFiles: {
+        note: 'The "template" query parameter is the NUMERIC id of a /template-previews record, not ' +
+            'a boolean flag. A fresh instance has no such records, and an upload without a valid ' +
+            'template id stores the file with no preview and reports no error.',
+    },
+    AdminMenusController_create: {
+        note: 'Create the menu with an empty pagesIds, then attach pages with AdminMenusController_update. ' +
+            'A non-empty pagesIds on create answers 500 (null value in column "page_id"). That 500 is ' +
+            'known — do not report it as an unexplained server failure.',
+    },
+    AdminFormsController_create: {
+        note: 'Send the payload wrapped under "newForm". The form "type" is missing from the schema but ' +
+            'is accepted and persisted: order | sign_in_up | collection | data | rating. A contact ' +
+            'form is "data". Omit it and the form is created with type null.',
+        verifyWith: {
+            opId: 'AdminFormsController_findAll',
+            check: 'type',
+            why: 'the field is absent from the schema, so an omitted type is not reported as missing',
+        },
+    },
+    AdminFormsController_update: {
+        note: '"formModuleConfigs" is a full replacement list, not a patch. Omitting it deletes every ' +
+            'module binding of the form AND the submissions recorded against those bindings, and the ' +
+            'call still answers 200 true. Read the form first and send its current formModuleConfigs ' +
+            'back unless changing them is the point. This is also the only operation that creates a ' +
+            'binding: an entry with formId, moduleId and either isGlobal or entityIdentifiers.',
+        verifyWith: {
+            opId: 'AdminFormsController_findOne',
+            check: 'formModuleConfigs',
+            why: 'an omitted formModuleConfigs is applied as "unbind everything", submissions included',
+        },
+    },
+    AdminFormDataController_create: {
+        note: 'A submission needs formIdentifier, formModuleConfigId, moduleEntityIdentifier and ' +
+            'locale-keyed formData. formModuleConfigId is the id of a module binding, which only ' +
+            'AdminFormsController_update creates and only AdminFormsController_findOne reports, under ' +
+            'formModuleConfigs[].id — a freshly created form has none and accepts nothing. The server ' +
+            'joins the config back to its form and compares identifiers, so a config id belonging to ' +
+            'another form, or to no form, answers 400 "Incorrect formIdentifier for provided config": ' +
+            'the message names formIdentifier, the wrong field is usually the config id. Checks run ' +
+            'fields first, then the form type, then the config, so a field error arriving first does ' +
+            'not mean the config is optional. A form with type null fails earlier with "Form has ' +
+            'incorrect type". Field validation is wired into the Content API only: through the Admin ' +
+            'API a missing required field is stored rather than rejected, so a submission accepted ' +
+            'here does not prove a visitor\'s submission would pass.',
+        verifyWith: {
+            opId: 'AdminFormDataController_findByFormMarker',
+            check: 'the submission you sent',
+            why: 'the stored submission is the only proof the binding it names is the intended one',
+        },
+    },
+    AdminPagesController_update: {
+        note: 'Omitting parentId does not leave the parent alone — it moves the page to the root and ' +
+            'decrements the former parent\'s childrenCount. Read the page first and send parentId ' +
+            'back unchanged unless you mean to re-parent it.',
+        verifyWith: {
+            opId: 'AdminPagesController_findOne',
+            check: 'parentId',
+            why: 'an omitted parentId is applied as "move to root", and the update still answers 200',
+        },
+    },
+    AdminBlocksController_update: {
+        note: 'Omitting blockPages detaches the block from every page it was on. Read the block first ' +
+            'and send its current page list back unless you mean to change it.',
+        verifyWith: {
+            opId: 'AdminBlocksController_findOne',
+            check: 'blockPages',
+            why: 'an omitted blockPages is applied as "detach everything", and the update answers 200',
+        },
+    },
+    AdminProductsController_countAll: { readOnly: true },
+    AdminProductsController_findByIds: { readOnly: true },
+    AdminProductsController_findAllByWithOutCategory: { readOnly: true },
+    AdminProductsController_findAllByCategoryIdForAdmin: { readOnly: true },
+    AdminProductsController_countByCategoryId: { readOnly: true },
+    AdminProductsController_countByCategoryMarker: { readOnly: true },
+    AdminUsersController_findAllByConditions: { readOnly: true },
+    AdminUsersController_search: { readOnly: true },
+    AdminFormDataController_findByFormMarker: { readOnly: true },
+    AdminBlocksController_findCartComplementProductsByBody: { readOnly: true },
+    AdminBlocksController_findCartSimilarProductsByBody: { readOnly: true },
+    AdminBlocksController_findWishlistSimilarProductsByBody: { readOnly: true },
+    AdminUserGroupsController_getGroupRoutesWithPermissions: { readOnly: true },
+};
+export const readOnlyOpIds = () => Object.entries(OPERATION_NOTES)
+    .filter(([, note]) => note.readOnly === true)
+    .map(([opId]) => opId);

package/dist/api/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/api/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAI5C,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAO7C;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0D;IAEjF,OAAO,CAAC,MAAM,CAAC,IAAI;IAMnB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,MAAM;IAU5D;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,OAAO;IAS7E,8EAA8E;IAC9E,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,OAAO;IAU9E,OAAO,CAAC,KAAK;CAOd;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,GACrB,WAAW,SAAS,EACpB,OAAO,UAAU,KAChB,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAY9C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,MAAM,GAAI,QAAQ;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;CACvB,KAAG,cAoCH,CAAC"}