@qingflow-tech/qingflow-cli 1.1.61-beta.5 → 1.1.61

package/src/qingflow_mcp/cli/commands/builder.py

@@ -1,7 +1,6 @@
 from __future__ import annotations
 
 import argparse
-import sys
 from copy import deepcopy
 from pathlib import Path
 
@@ -19,7 +18,6 @@ from ...app_form_validator import (
     validate_declaration,
     validate_formula_expression,
 )
-from ...builder_facade.portals_schema import PORTALS_SUPPORTED_SCHEMA_KINDS
 from ...builder_facade.views_schema import VIEWS_SUPPORTED_SCHEMA_KINDS
 from ..context import CliContext
 from ..json_io import load_json_value
@@ -262,39 +260,17 @@ def register(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) ->
     portal_list = portal_subparsers.add_parser("list", help="列出可配置门户")
     portal_list.set_defaults(handler=_handle_portal_list, format_hint="builder_summary")
 
-    portal_schema = portal_subparsers.add_parser("schema", help="读取门户声明 Schema")
-    portal_schema.add_argument("--schema-version")
-    portal_schema.add_argument(
-        "--schema-kind",
-        choices=PORTALS_SUPPORTED_SCHEMA_KINDS,
-    )
-    portal_schema.set_defaults(handler=_handle_portal_schema, format_hint="builder_summary", force_json_output=True)
-
-    portal_get = portal_subparsers.add_parser("get", help="读取门户声明或详情")
+    portal_get = portal_subparsers.add_parser("get", help="读取门户详情")
     portal_get.add_argument("--dash-key", required=True)
     portal_get.add_argument("--being-draft", action=argparse.BooleanOptionalAction, default=True)
-    portal_get.add_argument(
-        "--schema-kind",
-        choices=("summary", "complete", "raw"),
-        default="summary",
-        help="summary/complete＝canonical 声明投影(重放提取锦点);raw＝原始归一响应",
-    )
-    portal_get.add_argument("--schema-version")
     portal_get.set_defaults(handler=_handle_portal_get, format_hint="builder_summary")
 
-    portal_validate = portal_subparsers.add_parser("validate", help="只校验门户声明，不访问后端")
-    portal_validate.add_argument("--file", required=True, help="门户声明 JSON 文件，- 表示 stdin")
-    portal_validate.add_argument("--schema-version", help="固定使用的门户 Schema 版本；缺省读文件内 schema_version，再缺省 latest")
-    portal_validate.set_defaults(handler=_handle_portal_validate, format_hint="builder_summary", force_json_output=True)
-
     portal_apply = portal_subparsers.add_parser("apply", help="更新门户")
-    portal_apply.add_argument("--file", help="声明文件主形态(完整 portal 声明 JSON，支持 - stdin)；与 patch 参数互斥")
-    portal_apply.add_argument("--schema-version", help="声明使用的 Schema 版本；缺省读文件内 schema_version，再缺省 latest")
     portal_apply.add_argument("--dash-key", default="")
     portal_apply.add_argument("--dash-name", default="")
     portal_apply.add_argument("--package-id", type=int)
-    portal_apply.add_argument("--publish", action=argparse.BooleanOptionalAction, default=None, help="发布开关；--file 声明模式下缺省尊重声明内 publish 字段（再缺省 true），显式传参时覆盖声明值")
-    portal_apply.add_argument("--payload-file", help="兼容：完整门户 payload JSON(裸 DTO 透传)；新代码改用 --file")
+    portal_apply.add_argument("--publish", action=argparse.BooleanOptionalAction, default=True)
+    portal_apply.add_argument("--payload-file")
     portal_apply.add_argument("--sections-file")
     portal_apply.add_argument("--layout-preset", default="")
     portal_apply.add_argument("--visibility-file")
@@ -1005,36 +981,8 @@ def _handle_portal_list(args: argparse.Namespace, context: CliContext) -> dict:
     return context.builder.portal_list(profile=args.profile)
 
 
-def _handle_portal_schema(args: argparse.Namespace, context: CliContext) -> dict:
-    return context.builder.portal_schema(
-        schema_version=getattr(args, "schema_version", None),
-        schema_kind=getattr(args, "schema_kind", None),
-    )
-
-
-def _handle_portal_validate(args: argparse.Namespace, context: CliContext) -> dict:
-    payload = load_json_value(
-        args.file,
-        option_name="--file",
-        max_bytes=2 * 1024 * 1024,
-        max_depth=64,
-    )
-    if not isinstance(payload, dict):
-        raise_config_error("builder portal validate --file must contain a JSON object")
-    return context.builder.portal_validate(
-        declaration=payload,
-        schema_version=getattr(args, "schema_version", None),
-    )
-
-
 def _handle_portal_get(args: argparse.Namespace, context: CliContext) -> dict:
-    return context.builder.portal_get(
-        profile=args.profile,
-        dash_key=args.dash_key,
-        being_draft=bool(args.being_draft),
-        schema_kind=getattr(args, "schema_kind", "summary") or "summary",
-        schema_version=getattr(args, "schema_version", None),
-    )
+    return context.builder.portal_get(profile=args.profile, dash_key=args.dash_key, being_draft=bool(args.being_draft))
 
 
 def _handle_view_get(args: argparse.Namespace, context: CliContext) -> dict:
@@ -1437,62 +1385,6 @@ def _handle_charts_apply(args: argparse.Namespace, context: CliContext) -> dict:
 
 
 def _handle_portal_apply(args: argparse.Namespace, context: CliContext) -> dict:
-    file_declaration = (
-        load_json_value(args.file, option_name="--file", max_bytes=4 * 1024 * 1024, max_depth=64)
-        if getattr(args, "file", None)
-        else None
-    )
-    file_schema_version: str | None = None
-    legacy_args_used = False
-    if file_declaration is not None:
-        if not isinstance(file_declaration, dict):
-            raise_config_error("builder portal apply --file must contain a JSON object")
-        legacy_keys = (
-            getattr(args, "sections_file", None),
-            getattr(args, "patch_sections_file", None),
-            getattr(args, "visibility_file", None),
-            getattr(args, "auth_file", None),
-            getattr(args, "dash_global_config_file", None),
-            getattr(args, "config_file", None),
-            getattr(args, "payload_file", None),
-            getattr(args, "icon", None),
-            getattr(args, "color", None),
-            (getattr(args, "dash_name", "") or ""),
-            (getattr(args, "layout_preset", "") or ""),
-        )
-        if any(bool(item) for item in legacy_keys):
-            raise_config_error(
-                "builder portal apply --file cannot be combined with patch parameters.",
-                fix_hint="Put the full declaration in the --file JSON; keep only --schema-version/--publish/--dash-key flags.",
-                error_code="ARGUMENT_ERROR",
-            )
-        if getattr(args, "package_id", None) is not None:
-            file_declaration.setdefault("package_tag_id", args.package_id)
-        if getattr(args, "dash_key", ""):
-            file_declaration["dash_key"] = args.dash_key
-        # publish 三态对齐 MCP（声明值优先、显式 flag 最高）：声明内 publish 弹出后由 flag 解析——
-        # flag 未传时尊重声明值（含幂等重放的 publish:false），声明也未写时才缺省 true。
-        flag_publish = getattr(args, "publish", None)
-        declaration_publish = file_declaration.pop("publish", None)
-        effective_publish = (
-            bool(flag_publish)
-            if flag_publish is not None
-            else (bool(declaration_publish) if declaration_publish is not None else True)
-        )
-        file_schema_version = str(file_declaration.pop("schema_version", None) or file_declaration.pop("schemaVersion", None) or "").strip() or None
-        effective_schema_version = getattr(args, "schema_version", None) or file_schema_version
-        return context.builder.portal_apply(
-            profile=args.profile,
-            payload=file_declaration,
-            schema_version=effective_schema_version,
-            publish=effective_publish,
-        )
-    legacy_args_used = True
-    if legacy_args_used:
-        print(
-            "[deprecation] builder portal apply patch parameters are in a compatibility window; prefer `--file <declaration.json>`",
-            file=sys.stderr,
-        )
     payload = load_object_arg(args.payload_file, option_name="--payload-file") if getattr(args, "payload_file", None) else None
     payload_obj = payload if isinstance(payload, dict) else {}
     effective_dash_name = (args.dash_name or str(payload_obj.get("dash_name") or payload_obj.get("dashName") or payload_obj.get("name") or "")).strip()
@@ -1521,7 +1413,7 @@ def _handle_portal_apply(args: argparse.Namespace, context: CliContext) -> dict:
         dash_key=args.dash_key,
         dash_name=args.dash_name,
         package_id=args.package_id,
-        publish=bool(args.publish if args.publish is not None else True),
+        publish=bool(args.publish),
         sections=sections,
         layout_preset=args.layout_preset,
         visibility=load_object_arg(args.visibility_file, option_name="--visibility-file"),
@@ -1532,7 +1424,6 @@ def _handle_portal_apply(args: argparse.Namespace, context: CliContext) -> dict:
         dash_global_config=load_object_arg(args.dash_global_config_file, option_name="--dash-global-config-file"),
         config=load_object_arg(args.config_file, option_name="--config-file"),
         payload=payload,
-        schema_version=getattr(args, "schema_version", None),
         patch_sections=patch_sections,
     )
 

package/src/qingflow_mcp/cli/main.py

@@ -7,22 +7,11 @@ import sys
 from typing import Any, Callable, TextIO
 
 from ..errors import QingflowApiError, backend_code_value_int, message_looks_like_invalid_token
-from ..public_surface import (
-    NON_TOOL_CLI_HANDLER_ROUTES,
-    cli_public_tool_spec_from_namespace,
-    cli_route_from_namespace,
-    cli_trim_key_from_namespace,
-)
+from ..public_surface import cli_public_tool_spec_from_namespace
 from ..resource_uri import cli_resource_base_url
 from ..response_trim import resolve_cli_tool_name, trim_error_response, trim_public_response
 from ..tools.ai_builder_tools import _attach_builder_apply_envelope
 from ..version import get_cli_version, get_cli_version_info
-from ..tool_policy import (
-    TOOL_POLICY_ENV,
-    TOOL_POLICY_INVALID,
-    ToolPolicyViolation,
-    parse_tool_policy,
-)
 from .context import CliContext, build_cli_context
 from .formatters import emit_json_result, emit_text_result
 from .commands import register_all_commands
@@ -101,14 +90,6 @@ def run(
     if handler is None:
         parser.print_help(out)
         return 2
-    violation = _cli_tool_policy_violation(args)
-    if violation is not None:
-        return _emit_error(
-            violation.payload(),
-            json_mode=bool(args.json),
-            stdout=out,
-            stderr=err,
-        )
     try:
         if _should_force_json_output(args):
             setattr(args, "json", True)
@@ -141,20 +122,6 @@ def run(
     return exit_code
 
 
-def _cli_tool_policy_violation(args: argparse.Namespace) -> ToolPolicyViolation | None:
-    stable_id = cli_trim_key_from_namespace(args)
-    if stable_id is None:
-        # 仅显式登记的非业务分发器可跳过闸门；无子命令的新增 handler 也必须默认拒绝。
-        if cli_route_from_namespace(args) in NON_TOOL_CLI_HANDLER_ROUTES:
-            return None
-        return ToolPolicyViolation(
-            TOOL_POLICY_INVALID,
-            "user:unregistered",
-            "CLI 业务命令未登记稳定工具 ID",
-        )
-    return parse_tool_policy(os.getenv(TOOL_POLICY_ENV)).violation_for(stable_id)
-
-
 def _handle_version(_args: argparse.Namespace, _context: CliContext) -> dict[str, Any]:
     info = get_cli_version_info()
     return {

package/src/qingflow_mcp/cloud_context.py

@@ -2,14 +2,11 @@ from __future__ import annotations
 
 from contextvars import ContextVar
 from dataclasses import dataclass, field
-from typing import TYPE_CHECKING, Callable
+from typing import Callable
 
 from .backend_client import BackendRequestContext
 from .session_store import BackendSession, SessionProfile
 
-if TYPE_CHECKING:
-    from .tool_policy import ToolPolicySnapshot
-
 
 CLOUD_PROFILE_NAME = "__cloud_mcp__"
 
@@ -76,15 +73,3 @@ current_call_platform: ContextVar[str] = ContextVar(
     "qingflow_mcp_current_call_platform",
     default="",
 )
-
-# 远端 MCP 每个 HTTP 请求独立绑定策略原文；缺头用 None 表示，不回退进程环境变量。
-current_tool_policy_header: ContextVar[str | None] = ContextVar(
-    "qingflow_mcp_current_tool_policy_header",
-    default=None,
-)
-
-# 在 HTTP 入口合成一次快照，列表与调用共用，避免将 URL 选择保存到会话或共享环境。
-current_http_tool_policy: ContextVar[ToolPolicySnapshot | None] = ContextVar(
-    "qingflow_mcp_current_http_tool_policy",
-    default=None,
-)

package/src/qingflow_mcp/public_surface.py

@@ -1,6 +1,5 @@
 from __future__ import annotations
 
-import argparse
 from argparse import Namespace
 from dataclasses import dataclass
 
@@ -110,7 +109,6 @@ USER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
     PublicToolSpec(USER_DOMAIN, "record_export_direct", ("record_export_direct",), ("export", "direct"), cli_show_effective_context=True),
     PublicToolSpec(USER_DOMAIN, "record_code_block_run", ("record_code_block_run",), ("record", "code-block-run"), cli_show_effective_context=True, cli_context_write=True),
     PublicToolSpec(USER_DOMAIN, "task_list", ("task_list",), ("task", "list"), cli_show_effective_context=True),
-    PublicToolSpec(USER_DOMAIN, "task_workbench", cli_route=("task",), mcp_public=False),
     PublicToolSpec(USER_DOMAIN, "task_get", ("task_get",), ("task", "get"), cli_show_effective_context=True),
     PublicToolSpec(USER_DOMAIN, "task_action_execute", ("task_action_execute",), ("task", "action"), cli_show_effective_context=True, cli_context_write=True),
     PublicToolSpec(
@@ -132,12 +130,12 @@ USER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
 
 
 BUILDER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
-    PublicToolSpec(BUILDER_DOMAIN, "auth_use_credential", ("auth_use_credential",), cli_public=False),
-    PublicToolSpec(BUILDER_DOMAIN, "auth_whoami", ("auth_whoami",), cli_public=False),
-    PublicToolSpec(BUILDER_DOMAIN, "auth_logout", ("auth_logout",), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "auth_use_credential", ("auth_use_credential",), ("builder", "auth", "use-credential"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "auth_whoami", ("auth_whoami",), ("builder", "auth", "whoami"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "auth_logout", ("auth_logout",), ("builder", "auth", "logout"), cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "get_login_link", ("get_login_link",), mcp_public=True, cli_public=False),
-    PublicToolSpec(BUILDER_DOMAIN, "workspace_list", ("workspace_list",), cli_public=False),
-    PublicToolSpec(BUILDER_DOMAIN, "workspace_get", ("workspace_get",), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "workspace_list", ("workspace_list",), ("builder", "workspace", "list"), cli_public=False),
+    PublicToolSpec(BUILDER_DOMAIN, "workspace_get", ("workspace_get",), ("builder", "workspace", "get"), cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "file_upload_local", ("file_upload_local",), ("builder", "file", "upload-local"), has_contract=True, cli_show_effective_context=True, cli_context_write=True),
     PublicToolSpec(BUILDER_DOMAIN, "feedback_submit", ("feedback_submit",), ("builder", "feedback", "submit"), has_contract=True),
     PublicToolSpec(BUILDER_DOMAIN, "builder_tool_contract", ("builder_tool_contract",), ("builder", "contract"), has_contract=False),
@@ -184,8 +182,6 @@ BUILDER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
     PublicToolSpec(BUILDER_DOMAIN, "app_views_get", ("app_views_get",), ("builder", "views", "get"), cli_show_effective_context=True),
     PublicToolSpec(BUILDER_DOMAIN, "app_views_validate", (), ("builder", "views", "validate"), mcp_public=True),
     PublicToolSpec(BUILDER_DOMAIN, "app_views_apply", ("app_views_apply",), ("builder", "views", "apply"), has_contract=True, cli_show_effective_context=True, cli_context_write=True),
-    PublicToolSpec(BUILDER_DOMAIN, "portal_schema", (), ("builder", "portal", "schema"), mcp_public=True),
-    PublicToolSpec(BUILDER_DOMAIN, "portal_validate", (), ("builder", "portal", "validate"), mcp_public=True),
     PublicToolSpec(BUILDER_DOMAIN, "app_charts_apply", ("app_charts_apply",), ("builder", "charts", "apply"), has_contract=True, cli_show_effective_context=True, cli_context_write=True),
     PublicToolSpec(BUILDER_DOMAIN, "portal_apply", ("portal_apply",), ("builder", "portal", "apply"), has_contract=True, cli_show_effective_context=True, cli_context_write=True),
     PublicToolSpec(BUILDER_DOMAIN, "portal_delete", ("portal_delete",), ("builder", "portal", "delete"), has_contract=True, cli_show_effective_context=True, cli_context_write=True),
@@ -198,8 +194,7 @@ PUBLIC_TOOL_BY_KEY: dict[str, PublicToolSpec] = {spec.trim_key: spec for spec in
 PUBLIC_TOOL_BY_CLI_ROUTE: dict[tuple[str, ...], PublicToolSpec] = {
     spec.cli_route: spec
     for spec in ALL_PUBLIC_TOOL_SPECS
-    # 隐藏命令仍有可达 handler，闸门绑定不能把“帮助不可见”误当成“不可执行”。
-    if spec.cli_route is not None
+    if spec.cli_public and spec.cli_route is not None
 }
 PUBLIC_TOOL_BY_CLI_ROUTE.update(
     {
@@ -210,9 +205,6 @@ PUBLIC_TOOL_BY_CLI_ROUTE.update(
     }
 )
 
-# 这些 handler 只负责版本输出或参数迁移提示，不会发起轻流业务请求。
-NON_TOOL_CLI_HANDLER_ROUTES = frozenset({("version",), ("record", "schema")})
-
 
 def public_tool_specs(domain: str | None = None) -> tuple[PublicToolSpec, ...]:
     if domain is None:
@@ -266,13 +258,11 @@ def cli_route_from_namespace(args: Namespace) -> tuple[str, ...] | None:
         record_command = getattr(args, "record_command", None)
         if record_command == "schema":
             schema_command = getattr(args, "record_schema_command", None)
-            if isinstance(schema_command, str) and schema_command:
-                return (command, "schema", schema_command)
-            return (command, "schema")
+            return (command, "schema", schema_command) if isinstance(schema_command, str) and schema_command else None
         return (command, record_command) if isinstance(record_command, str) and record_command else None
     if command == "task":
         task_command = getattr(args, "task_command", None)
-        return (command, task_command) if isinstance(task_command, str) and task_command else (command,)
+        return (command, task_command) if isinstance(task_command, str) and task_command else None
     if command != "builder":
         child_attr = f"{command}_command"
         child = getattr(args, child_attr, None)
@@ -293,54 +283,3 @@ def cli_route_from_namespace(args: Namespace) -> tuple[str, ...] | None:
     child_attr = f"builder_{builder_command.replace('-', '_')}_command"
     child = getattr(args, child_attr, None)
     return ("builder", builder_command, child) if isinstance(child, str) and child else None
-
-
-def discover_cli_handler_routes(
-    parser: argparse.ArgumentParser,
-) -> dict[tuple[str, ...], tuple[str, ...]]:
-    """从 argparse 实际 handler 树枚举规范化路由及其实现，包含中间交互入口。"""
-    discovered: dict[tuple[str, ...], set[str]] = {}
-
-    def walk(current: argparse.ArgumentParser, path: tuple[str, ...], inherited: dict[str, object]) -> None:
-        attrs = dict(inherited)
-        for action in current._actions:
-            if isinstance(action, argparse._SubParsersAction):
-                continue
-            if action.dest != argparse.SUPPRESS and action.default != argparse.SUPPRESS:
-                attrs.setdefault(action.dest, action.default)
-        attrs.update(current._defaults)
-
-        handler = current._defaults.get("handler")
-        if callable(handler):
-            variants = [attrs]
-            for action in current._actions:
-                if isinstance(action, argparse._SubParsersAction) or action.choices is None:
-                    continue
-                variants.extend({**attrs, action.dest: choice} for choice in action.choices)
-            for variant in variants:
-                route = cli_route_from_namespace(Namespace(**variant))
-                if route is None:
-                    route = _normalize_cli_parser_path(path)
-                if route:
-                    identity = f"{handler.__module__}:{handler.__qualname__}"
-                    discovered.setdefault(route, set()).add(identity)
-
-        for action in current._actions:
-            if not isinstance(action, argparse._SubParsersAction):
-                continue
-            for name, child in action.choices.items():
-                next_attrs = dict(attrs)
-                next_attrs[action.dest] = name
-                walk(child, path + (name,), next_attrs)
-
-    walk(parser, (), {})
-    return {route: tuple(sorted(handlers)) for route, handlers in discovered.items()}
-
-
-def _normalize_cli_parser_path(path: tuple[str, ...]) -> tuple[str, ...]:
-    normalized = list(path)
-    if normalized and normalized[0] == "build":
-        normalized[0] = "builder"
-    if len(normalized) > 1 and normalized[0] == "builder" and normalized[1] == "associated-resources":
-        normalized[1] = "associated-resource"
-    return tuple(normalized)

package/src/qingflow_mcp/response_trim.py

@@ -51,9 +51,8 @@ COMMON_ERROR_DROP_TOP = {
 
 SUCCESS_POLICY_BY_TOOL: dict[str, TransformFn] = {}
 
-#: 这些校验命令的产出契约明确包含 ok 字段（供阶段 2 SKILL.md 引用），
+#: 这两个校验命令的产出契约明确包含 ok 字段（供阶段 2 SKILL.md 引用），
 #: 需在 success 裁剪时保留 ok（默认 COMMON_SUCCESS_DROP_TOP 会丢弃 ok）。
-#: `builder:app_views_validate`（views 声明式校验）同属校验类工具，ok 同样进产出契约。
 _KEEP_OK_TOOLS = {
     "builder:app_form_validate_formula",
     "builder:app_form_validate_code_block",

package/src/qingflow_mcp/server.py

@@ -2,6 +2,8 @@ from __future__ import annotations
 
 from datetime import date
 
+from mcp.server.fastmcp import FastMCP
+
 from .backend_client import BackendClient
 from .session_store import SessionStore
 from .tools.app_tools import AppTools
@@ -24,11 +26,9 @@ from .tools.task_context_tools import TaskContextTools
 from .tools.view_tools import ViewTools
 from .tools.workflow_tools import WorkflowTools
 from .tools.workspace_tools import WorkspaceTools
-from .tool_catalog import stdio_server_bindings
-from .tool_policy import PolicyAwareFastMCP, configure_tool_policy
 
 
-def _register_missing_builder_tools(server: PolicyAwareFastMCP) -> None:
+def _register_missing_builder_tools(server: FastMCP) -> None:
     """Add current high-level builder tools to the unified MCP without duplicate names."""
     from .server_app_builder import build_builder_server
 
@@ -48,10 +48,10 @@ def _register_missing_builder_tools(server: PolicyAwareFastMCP) -> None:
         )
 
 
-def build_server() -> PolicyAwareFastMCP:
+def build_server() -> FastMCP:
     today = date.today()
     current_year = today.year
-    server = PolicyAwareFastMCP(
+    server = FastMCP(
         "Qingflow MCP",
         instructions=f"""Use this unified server for Qingflow operational and builder workflows. Current date: `{today.isoformat()}`.
 
@@ -259,14 +259,8 @@ If the current MCP capability is unsupported, the workflow is awkward, or the us
     WorkflowTools(sessions, backend).register(server)
     ViewTools(sessions, backend).register(server)
     SolutionTools(sessions, backend).register(server)
-    # 保存补齐 Builder 前的真实注册来源，裸名冲突只能绑定最终保留 callable 的来源域。
-    legacy_tool_names = set(server._tool_manager._tools)
     _register_missing_builder_tools(server)
-    return configure_tool_policy(
-        server,
-        stdio_server_bindings(legacy_tool_names, server._tool_manager._tools),
-        source="environment",
-    )
+    return server
 
 
 mcp = build_server()

package/src/qingflow_mcp/server_app_builder.py

@@ -2,6 +2,8 @@ from __future__ import annotations
 
 import json
 
+from mcp.server.fastmcp import FastMCP
+
 from .backend_client import BackendClient
 from .config import DEFAULT_PROFILE
 from .response_trim import BUILDER_SERVER_METHOD_MAP, trim_error_response, trim_public_response, wrap_trimmed_methods
@@ -12,8 +14,6 @@ from .tools.auth_tools import AuthTools
 from .tools.feedback_tools import FeedbackTools
 from .tools.file_tools import FileTools
 from .tools.workspace_tools import WorkspaceTools
-from .tool_catalog import builder_server_bindings
-from .tool_policy import PolicyAwareFastMCP, configure_tool_policy
 
 
 def _config_failure(message: str, *, fix_hint: str) -> dict:
@@ -27,8 +27,8 @@ def _config_failure(message: str, *, fix_hint: str) -> dict:
     }
 
 
-def build_builder_server() -> PolicyAwareFastMCP:
-    server = PolicyAwareFastMCP(
+def build_builder_server() -> FastMCP:
+    server = FastMCP(
         "Qingflow App Builder MCP",
         instructions=(
             "Use this server for AI-native Qingflow builder workflows. "
@@ -482,36 +482,13 @@ def build_builder_server() -> PolicyAwareFastMCP:
     def portal_list(profile: str = DEFAULT_PROFILE) -> dict:
         return ai_builder.portal_list(profile=profile)
 
-    @server.tool()
-    def portal_schema(
-        schema_version: str | None = None,
-        schema_kind: str | None = None,
-    ) -> dict:
-        """Get a complete portals schema or a focused component schema such as chart, view, grid, or carousel."""
-        return ai_builder.portal_schema(schema_version=schema_version, schema_kind=schema_kind)
-
-    @server.tool()
-    def portal_validate(
-        declaration: dict | None = None,
-        schema_version: str | None = None,
-    ) -> dict:
-        return ai_builder.portal_validate(declaration=declaration or {}, schema_version=schema_version)
-
     @server.tool()
     def portal_get(
         profile: str = DEFAULT_PROFILE,
         dash_key: str = "",
         being_draft: bool = True,
-        schema_kind: str = "summary",
-        schema_version: str | None = None,
     ) -> dict:
-        return ai_builder.portal_get(
-            profile=profile,
-            dash_key=dash_key,
-            being_draft=being_draft,
-            schema_kind=schema_kind,
-            schema_version=schema_version,
-        )
+        return ai_builder.portal_get(profile=profile, dash_key=dash_key, being_draft=being_draft)
 
     @server.tool()
     def view_get(profile: str = DEFAULT_PROFILE, view_key: str = "") -> dict:
@@ -647,10 +624,6 @@ def build_builder_server() -> PolicyAwareFastMCP:
         color: str | None = None,
         hide_copyright: bool | None = None,
         dash_global_config: dict | None = None,
-        global_config: dict | None = None,
-        style_template_id: int | None = None,
-        overall_style: dict | None = None,
-        schema_version: str | None = None,
         config: dict | None = None,
         payload: dict | None = None,
         patch_sections: list[dict] | None = None,
@@ -687,10 +660,6 @@ def build_builder_server() -> PolicyAwareFastMCP:
             color=color,
             hide_copyright=hide_copyright,
             dash_global_config=dash_global_config,
-            global_config=global_config,
-            style_template_id=style_template_id,
-            overall_style=overall_style,
-            schema_version=schema_version,
             config=config or {},
             payload=payload,
             patch_sections=patch_sections,
@@ -720,11 +689,7 @@ def build_builder_server() -> PolicyAwareFastMCP:
             expected_package_id=expected_package_id,
         )
 
-    return configure_tool_policy(
-        server,
-        builder_server_bindings(server._tool_manager._tools),
-        source="environment",
-    )
+    return server
 
 
 def main() -> None:

package/src/qingflow_mcp/server_app_user.py

@@ -3,6 +3,8 @@ from __future__ import annotations
 import json
 from datetime import date
 
+from mcp.server.fastmcp import FastMCP
+
 from .backend_client import BackendClient
 from .config import DEFAULT_PROFILE
 from .response_trim import USER_SERVER_METHOD_MAP, trim_error_response, trim_public_response, wrap_trimmed_methods
@@ -20,14 +22,12 @@ from .tools.login_link_tools import LOGIN_LINK_DESCRIPTION, LoginLinkTools
 from .tools.resource_read_tools import ResourceReadTools
 from .tools.task_context_tools import TaskContextTools
 from .tools.workspace_tools import WorkspaceTools
-from .tool_catalog import user_server_bindings
-from .tool_policy import PolicyAwareFastMCP, configure_tool_policy
 
 
-def build_user_server(*, stateless_http: bool = False) -> PolicyAwareFastMCP:
+def build_user_server(*, stateless_http: bool = False) -> FastMCP:
     today = date.today()
     current_year = today.year
-    server = PolicyAwareFastMCP(
+    server = FastMCP(
         "Qingflow App User MCP",
         stateless_http=stateless_http,
         instructions=f"""Use this server for Qingflow operational workflows. Current date: `{today.isoformat()}`.
@@ -507,11 +507,7 @@ If the current MCP capability is unsupported, the workflow is awkward, or the us
     task_context_tools.register(server)
     directory_tools.register_frontend_search(server)
 
-    return configure_tool_policy(
-        server,
-        user_server_bindings(server._tool_manager._tools),
-        source="request" if stateless_http else "environment",
-    )
+    return server
 
 
 mcp = build_user_server()