callman-mcp 0.1.0

package/dist/resources/docs/diagramSchema.js

@@ -0,0 +1,65 @@
+export const DIAGRAM_SCHEMA_DOC = `# Diagrams (create_diagram, update_diagram, patch_diagram)
+
+A diagram is a **DiagramDocument** (schemaVersion 1): typed nodes with positions and sizes,
+edges between nodes, a title. You write the compact form below; the server assigns ids,
+sizes from the component catalog, edge styles from the semantic, and lays the nodes out.
+
+## Compact input
+\`\`\`jsonc
+{
+  "name": "Order platform",             // library entry name
+  "title": "Order platform — runtime view",
+  "nodes": [
+    { "id": "gw",    "type": "net.gateway",   "label": "API Gateway" },
+    { "id": "orders","type": "net.service",   "label": "Orders service", "parent": "k8s" },
+    { "id": "k8s",   "type": "net.zone",      "label": "Kubernetes" },      // a container
+    { "id": "db",    "type": "db.postgres",   "label": "orders db" },
+    { "id": "bus",   "type": "mq.kafka",      "label": "events" }
+  ],
+  "edges": [
+    { "source": "gw",     "target": "orders", "label": "REST",  "semantic": "sync" },
+    { "source": "orders", "target": "db",     "semantic": "sync" },
+    { "source": "orders", "target": "bus",    "label": "OrderCreated" }   // → bus automatically
+  ]
+}
+\`\`\`
+
+- \`type\` MUST be a catalog type — read \`callman://diagram/components\` (or one category:
+  \`callman://diagram/components/aws\`). Unknown types are rejected with suggestions; pass
+  \`strictTypes: false\` to draw them as plain rectangles instead.
+- \`parent\` puts a node inside a container node (zones, frames, pools). Declare the
+  container as a node too.
+- Edge \`semantic\`: \`sync\` (solid — request/response, default), \`async\` (dashed — event,
+  callback), \`fallback\` (dotted — retry / optional path), \`bus\` (heavy — message bus /
+  stream; automatic when an endpoint is a messaging component).
+- Positions are optional; when any node lacks one the whole diagram is laid out
+  (\`direction\`: DOWN, RIGHT, UP, LEFT). Give explicit \`position: {x,y}\` only when the user
+  asks for a specific arrangement.
+- Keep diagrams readable: 8–25 nodes, labels of 1–3 words, one edge per relationship.
+
+## Editing: patch_diagram ops
+\`\`\`jsonc
+{ "op": "addNode",    "node": { "type": "db.redis", "label": "cache" } }
+{ "op": "updateNode", "id": "orders", "changes": { "label": "Orders API" } }
+{ "op": "removeNode", "id": "bus" }                 // its edges are removed too
+{ "op": "addEdge",    "edge": { "source": "orders", "target": "n6", "semantic": "async" } }
+{ "op": "updateEdge", "id": "e2", "changes": { "label": "gRPC" } }
+{ "op": "removeEdge", "id": "e3" }
+{ "op": "setTitle",   "title": "New title" }
+\`\`\`
+\`relayout\`: \`new\` (default — only new nodes get a place), \`all\` (re-run layout), \`none\`.
+
+## Stored document (get_diagram view: "full")
+\`\`\`ts
+interface DiagramDocument {
+  schemaVersion: 1; id: string;
+  meta: { title: string; createdAt: string; updatedAt: string };
+  canvas?: { background?: "grid" | "dots" | "blank"; gridSize?: number };
+  nodes: { id; type; position: {x,y}; size: {width,height}; label?; parentId?; style?; data? }[];
+  edges: { id; source?; target?; label?; routing?; style?; markerEnd?; waypoints? }[];
+}
+\`\`\`
+Edge meaning is derived from \`style\` (dashed + dashPattern + strokeWidth) — you never set
+style directly; use \`semantic\`.
+`;
+//# sourceMappingURL=diagramSchema.js.map

package/dist/resources/docs/diagramSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagramSchema.js","sourceRoot":"","sources":["../../../src/resources/docs/diagramSchema.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+DjC,CAAC"}

package/dist/resources/docs/overview.d.ts

@@ -0,0 +1,2 @@
+export declare const OVERVIEW_DOC = "# Working with Callman through MCP\n\nCallman is an API client and test platform (collections of HTTP requests, environments,\nmulti-step test scenarios, system-design diagrams). This server exposes it to you through\ntools; everything you do goes to the same server the Callman desktop app uses, as the user\nwhose token is configured, limited to that token's permissions and the user's workspace role.\n\n## Start here\n1. `whoami` \u2014 proves the connection and tells you the workspaces, features and which tools\n   this token can use. If several workspaces exist and none is default, pass `workspace`\n   to workspace-scoped tools (or ask the user which one).\n2. Look before you create: `list_collections` / `get_collection_tree` / `search_requests`.\n   Creating a collection whose name exists is refused on purpose.\n3. Names work as references everywhere an id does (collection, folder, request, environment,\n   scenario, diagram, workspace). Ambiguous names come back as a candidate list \u2014 pick one.\n4. Preview big writes with `dryRun: true` (bulk create, imports, scenarios, diagrams).\n5. Deletions need `confirm: true`. Ask the user unless they explicitly requested the deletion.\n\n## Requests\n- Use `{{variable}}` for hosts and secrets (`{{baseUrl}}/users`) and put the values in an\n  environment (`create_environment` / `set_environment_variables`). Use `:id` for path\n  variables. See `callman://docs/request-schema`.\n- Bodies: a JSON value, a raw string, or `{ mode: raw|formdata|urlencoded }`.\n- Scripts run in a sandbox with the `pm.*` API \u2014 `callman://docs/scripting/pm-api`.\n- `run_request` / `run_collection` execute on the user's machine with real variable values;\n  you only get results and the names of variables scripts changed.\n\n## Secrets\nEnvironment values come back masked (`\u2022\u2022\u2022\u2022ab`) unless the token holds `environments:reveal`\nand you ask for `reveal: true`. Never write a masked value back \u2014 the server refuses it.\n\n## Scenarios\nMulti-step flows as a graph of typed nodes (request, condition, assertion, set-vars, poll,\ndb, kafka, script, wait, end \u2026). Read `callman://docs/scenario-nodes` before building one;\npartial node configs are merged over defaults. Runs happen on the server (`run_scenario`).\n\n## Diagrams\nSystem-design diagrams use a fixed component catalog \u2014 `callman://diagram/components`.\nBuild with `create_diagram` (auto layout), edit with `patch_diagram`, share with\n`share_diagram`. See `callman://docs/diagram-schema`.\n\n## After writing\nThe desktop app refreshes when the user switches back to it. Tell the user what you created\nand where (collection / folder names).\n";
+//# sourceMappingURL=overview.d.ts.map

package/dist/resources/docs/overview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"overview.d.ts","sourceRoot":"","sources":["../../../src/resources/docs/overview.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,4oFA4CxB,CAAC"}

package/dist/resources/docs/overview.js

@@ -0,0 +1,46 @@
+export const OVERVIEW_DOC = `# Working with Callman through MCP
+
+Callman is an API client and test platform (collections of HTTP requests, environments,
+multi-step test scenarios, system-design diagrams). This server exposes it to you through
+tools; everything you do goes to the same server the Callman desktop app uses, as the user
+whose token is configured, limited to that token's permissions and the user's workspace role.
+
+## Start here
+1. \`whoami\` — proves the connection and tells you the workspaces, features and which tools
+   this token can use. If several workspaces exist and none is default, pass \`workspace\`
+   to workspace-scoped tools (or ask the user which one).
+2. Look before you create: \`list_collections\` / \`get_collection_tree\` / \`search_requests\`.
+   Creating a collection whose name exists is refused on purpose.
+3. Names work as references everywhere an id does (collection, folder, request, environment,
+   scenario, diagram, workspace). Ambiguous names come back as a candidate list — pick one.
+4. Preview big writes with \`dryRun: true\` (bulk create, imports, scenarios, diagrams).
+5. Deletions need \`confirm: true\`. Ask the user unless they explicitly requested the deletion.
+
+## Requests
+- Use \`{{variable}}\` for hosts and secrets (\`{{baseUrl}}/users\`) and put the values in an
+  environment (\`create_environment\` / \`set_environment_variables\`). Use \`:id\` for path
+  variables. See \`callman://docs/request-schema\`.
+- Bodies: a JSON value, a raw string, or \`{ mode: raw|formdata|urlencoded }\`.
+- Scripts run in a sandbox with the \`pm.*\` API — \`callman://docs/scripting/pm-api\`.
+- \`run_request\` / \`run_collection\` execute on the user's machine with real variable values;
+  you only get results and the names of variables scripts changed.
+
+## Secrets
+Environment values come back masked (\`••••ab\`) unless the token holds \`environments:reveal\`
+and you ask for \`reveal: true\`. Never write a masked value back — the server refuses it.
+
+## Scenarios
+Multi-step flows as a graph of typed nodes (request, condition, assertion, set-vars, poll,
+db, kafka, script, wait, end …). Read \`callman://docs/scenario-nodes\` before building one;
+partial node configs are merged over defaults. Runs happen on the server (\`run_scenario\`).
+
+## Diagrams
+System-design diagrams use a fixed component catalog — \`callman://diagram/components\`.
+Build with \`create_diagram\` (auto layout), edit with \`patch_diagram\`, share with
+\`share_diagram\`. See \`callman://docs/diagram-schema\`.
+
+## After writing
+The desktop app refreshes when the user switches back to it. Tell the user what you created
+and where (collection / folder names).
+`;
+//# sourceMappingURL=overview.js.map

package/dist/resources/docs/overview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overview.js","sourceRoot":"","sources":["../../../src/resources/docs/overview.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4C3B,CAAC"}

package/dist/resources/docs/requestSchema.d.ts

@@ -0,0 +1,2 @@
+export declare const REQUEST_SCHEMA_DOC = "# Request input (create_request, create_requests_bulk, update_request)\n\n```jsonc\n{\n  \"name\": \"Create order\",                 // 1\u2013120 chars, shown in the sidebar\n  \"method\": \"POST\",                       // GET POST PUT PATCH DELETE HEAD OPTIONS TRACE\n  \"url\": \"{{baseUrl}}/orders/:orderId\",   // {{var}} = environment/global variable, :name = path variable\n  \"headers\": [{ \"key\": \"Content-Type\", \"value\": \"application/json\" }],\n  \"query\":   [{ \"key\": \"expand\", \"value\": \"items\", \"enabled\": true }],\n  \"pathVariables\": [{ \"key\": \"orderId\", \"value\": \"123\" }],\n  \"body\": { \"sku\": \"A1\", \"qty\": 2 },      // see Body\n  \"auth\": { \"type\": \"bearer\", \"token\": \"{{accessToken}}\" },   // see Auth\n  \"preRequestScript\": \"\",                 // pm.* script before sending\n  \"postResponseScript\": \"pm.test('created', () => pm.response.to.have.status(201));\\npm.environment.set('orderId', pm.response.json().id);\",\n  \"testsScript\": \"\",                      // legacy tests script (same API)\n  \"folder\": \"Orders/Write\",               // folder id, name or path (create_request / existing collection)\n  \"folderKey\": \"orders\"                   // create_requests_bulk with collectionName: key from `folders`\n}\n```\n\n## Body\n| You send | Stored as |\n|---|---|\n| a JSON object / array / number / boolean | that JSON value (JSON tab in the editor) |\n| a string | parsed as JSON when valid; otherwise raw text/xml/html by sniffing |\n| `{ \"mode\": \"raw\", \"raw\": \"<xml/>\", \"language\": \"xml\" }` | raw body with that language (json, xml, text, html) |\n| `{ \"mode\": \"formdata\", \"entries\": [{ \"key\": \"file\", \"value\": \"a.txt\" }] }` | multipart form |\n| `{ \"mode\": \"urlencoded\", \"entries\": [ \u2026 ] }` | x-www-form-urlencoded |\n| `{ \"mode\": \"none\" }` or omitted | no body |\n\nSet `Content-Type` yourself for raw non-JSON bodies; JSON gets it automatically at send time.\n\n## Auth\n```jsonc\n{ \"type\": \"none\" }\n{ \"type\": \"bearer\", \"token\": \"{{accessToken}}\" }\n{ \"type\": \"basic\", \"username\": \"{{user}}\", \"password\": \"{{pass}}\" }\n{ \"type\": \"apiKey\", \"key\": \"X-API-Key\", \"value\": \"{{apiKey}}\", \"location\": \"header\" }   // or \"query\"\n{ \"type\": \"oauth2\", \"grantType\": \"client_credentials\", \"tokenUrl\": \"{{authUrl}}/token\",\n  \"clientId\": \"{{clientId}}\", \"clientSecret\": \"{{clientSecret}}\", \"scope\": \"read write\" }\n```\nPrefer `{{variables}}` over literal secrets \u2014 the environment keeps them out of the request.\n\n## Variables\n- `{{name}}` resolves from the active environment, then global variables, then values set\n  by scripts during a run (`pm.environment.set`).\n- Dynamic values: `{{$uuid}}`, `{{$timestamp}}`, `{{$randomInt}}`, `{{$randomEmail}}` \u2026 \u2014\n  see `callman://docs/scripting/templating`.\n- Data-driven rows: `{{data.column}}`.\n\n## Scripts (pm.* API)\n`pm.test(name, fn)`, `pm.expect(value)`, `pm.response.json()` / `.code` / `.headers`,\n`pm.environment.set/get`, `pm.globals`, `pm.variables`, `pm.request`, `pm.sendRequest`,\n`pm.db.query` (when a DB connection is attached). Full reference:\n`callman://docs/scripting/pm-api`; sandbox limits: `callman://docs/scripting/sandbox`.\n\n## Folder skeleton (create_requests_bulk with collectionName)\n```jsonc\n{\n  \"collectionName\": \"Users API\",\n  \"folders\": [\n    { \"key\": \"users\", \"name\": \"Users\" },\n    { \"key\": \"users-admin\", \"name\": \"Admin\", \"parentKey\": \"users\" }\n  ],\n  \"requests\": [ { \"name\": \"List users\", \"method\": \"GET\", \"url\": \"{{baseUrl}}/users\", \"folderKey\": \"users\" } ]\n}\n```\nThe whole payload is created atomically (all or nothing).\n";
+//# sourceMappingURL=requestSchema.d.ts.map

package/dist/resources/docs/requestSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestSchema.d.ts","sourceRoot":"","sources":["../../../src/resources/docs/requestSchema.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,osHAoE9B,CAAC"}

package/dist/resources/docs/requestSchema.js

@@ -0,0 +1,70 @@
+export const REQUEST_SCHEMA_DOC = `# Request input (create_request, create_requests_bulk, update_request)
+
+\`\`\`jsonc
+{
+  "name": "Create order",                 // 1–120 chars, shown in the sidebar
+  "method": "POST",                       // GET POST PUT PATCH DELETE HEAD OPTIONS TRACE
+  "url": "{{baseUrl}}/orders/:orderId",   // {{var}} = environment/global variable, :name = path variable
+  "headers": [{ "key": "Content-Type", "value": "application/json" }],
+  "query":   [{ "key": "expand", "value": "items", "enabled": true }],
+  "pathVariables": [{ "key": "orderId", "value": "123" }],
+  "body": { "sku": "A1", "qty": 2 },      // see Body
+  "auth": { "type": "bearer", "token": "{{accessToken}}" },   // see Auth
+  "preRequestScript": "",                 // pm.* script before sending
+  "postResponseScript": "pm.test('created', () => pm.response.to.have.status(201));\\npm.environment.set('orderId', pm.response.json().id);",
+  "testsScript": "",                      // legacy tests script (same API)
+  "folder": "Orders/Write",               // folder id, name or path (create_request / existing collection)
+  "folderKey": "orders"                   // create_requests_bulk with collectionName: key from \`folders\`
+}
+\`\`\`
+
+## Body
+| You send | Stored as |
+|---|---|
+| a JSON object / array / number / boolean | that JSON value (JSON tab in the editor) |
+| a string | parsed as JSON when valid; otherwise raw text/xml/html by sniffing |
+| \`{ "mode": "raw", "raw": "<xml/>", "language": "xml" }\` | raw body with that language (json, xml, text, html) |
+| \`{ "mode": "formdata", "entries": [{ "key": "file", "value": "a.txt" }] }\` | multipart form |
+| \`{ "mode": "urlencoded", "entries": [ … ] }\` | x-www-form-urlencoded |
+| \`{ "mode": "none" }\` or omitted | no body |
+
+Set \`Content-Type\` yourself for raw non-JSON bodies; JSON gets it automatically at send time.
+
+## Auth
+\`\`\`jsonc
+{ "type": "none" }
+{ "type": "bearer", "token": "{{accessToken}}" }
+{ "type": "basic", "username": "{{user}}", "password": "{{pass}}" }
+{ "type": "apiKey", "key": "X-API-Key", "value": "{{apiKey}}", "location": "header" }   // or "query"
+{ "type": "oauth2", "grantType": "client_credentials", "tokenUrl": "{{authUrl}}/token",
+  "clientId": "{{clientId}}", "clientSecret": "{{clientSecret}}", "scope": "read write" }
+\`\`\`
+Prefer \`{{variables}}\` over literal secrets — the environment keeps them out of the request.
+
+## Variables
+- \`{{name}}\` resolves from the active environment, then global variables, then values set
+  by scripts during a run (\`pm.environment.set\`).
+- Dynamic values: \`{{$uuid}}\`, \`{{$timestamp}}\`, \`{{$randomInt}}\`, \`{{$randomEmail}}\` … —
+  see \`callman://docs/scripting/templating\`.
+- Data-driven rows: \`{{data.column}}\`.
+
+## Scripts (pm.* API)
+\`pm.test(name, fn)\`, \`pm.expect(value)\`, \`pm.response.json()\` / \`.code\` / \`.headers\`,
+\`pm.environment.set/get\`, \`pm.globals\`, \`pm.variables\`, \`pm.request\`, \`pm.sendRequest\`,
+\`pm.db.query\` (when a DB connection is attached). Full reference:
+\`callman://docs/scripting/pm-api\`; sandbox limits: \`callman://docs/scripting/sandbox\`.
+
+## Folder skeleton (create_requests_bulk with collectionName)
+\`\`\`jsonc
+{
+  "collectionName": "Users API",
+  "folders": [
+    { "key": "users", "name": "Users" },
+    { "key": "users-admin", "name": "Admin", "parentKey": "users" }
+  ],
+  "requests": [ { "name": "List users", "method": "GET", "url": "{{baseUrl}}/users", "folderKey": "users" } ]
+}
+\`\`\`
+The whole payload is created atomically (all or nothing).
+`;
+//# sourceMappingURL=requestSchema.js.map

package/dist/resources/docs/requestSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestSchema.js","sourceRoot":"","sources":["../../../src/resources/docs/requestSchema.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoEjC,CAAC"}

package/dist/resources/generated/aiPacks.d.ts

@@ -0,0 +1,3 @@
+export declare const AI_PACKS_CORE_VERSION = "1.28.0";
+export declare const AI_PACKS: Record<string, string>;
+//# sourceMappingURL=aiPacks.d.ts.map

package/dist/resources/generated/aiPacks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiPacks.d.ts","sourceRoot":"","sources":["../../../src/resources/generated/aiPacks.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAE9C,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAO3C,CAAC"}

package/dist/resources/generated/aiPacks.js

@@ -0,0 +1,11 @@
+// GENERATED by scripts/build-static-resources.mjs from callman-core@1.28.0 ai-packs — do not edit.
+export const AI_PACKS_CORE_VERSION = "1.28.0";
+export const AI_PACKS = {
+    "db-queries": "<!-- GENERATED FILE — do not edit by hand. Source: callman_core (npm run ai:packs). -->\n\n# Callman data access from scripts (`pm.db.query` / `pm.redis.command`)\n\n`pm.db.query({ connectionId, query })` — ALWAYS `await`. `query` is coerced to a string, `{{tokens}}` are resolved, then dispatched by the connection's type. `connectionId` may be omitted to use the request's configured DB connection. IMPORTANT: `pm.db.query` does NOT accept a `params`/bind array — inline values (quote strings) or use `{{env.X}}` tokens; SQL placeholders like `$1` or `?` are NOT bound.\n\n## MongoDB\n`query` MUST be a JSON STRING of a command object (use `JSON.stringify`), NOT a `db.coll.find(...)` shell string. The match key is `filter` (a top-level `query` key is rejected).\n\n```js\nconst body = pm.response.json();\nconst res = await pm.db.query({\n  connectionId: \"…\",\n  query: JSON.stringify({\n    collection: \"users\",\n    operation: \"findOne\",        // find | findOne | aggregate | countDocuments | insertOne | insertMany | updateOne | updateMany | deleteOne | deleteMany | findOneAndUpdate | findOneAndReplace | findOneAndDelete\n    filter: { email: body.data.user.email },\n  }),\n});\npm.expect(res.rowCount).to.be.above(0);   // existence check\n```\n\nPer-operation fields: `find`/`findOne` use `filter` (+ optional `projection`,`sort`,`limit`,`skip`); `aggregate` uses `pipeline` (array); `insertOne` uses `document`, `insertMany` uses `documents`; `updateOne`/`updateMany`/`findOneAndUpdate` use `filter`+`update` (Mongo update operators, e.g. `{ $set: { … } }`); `deleteOne`/`deleteMany` use `filter`; `findOneAndUpdate`/`findOneAndReplace` accept `returnDocument: \"before\"|\"after\"`. A 24-hex string in a filter is auto-coerced to ObjectId (or use `{ \"$oid\": \"…\" }`). Rows are in `res.rows`; write ops surface counts in `res.rowCount`.\n\n## PostgreSQL / MySQL / Oracle (SQL)\n`query` is plain SQL text. Because `pm.db.query` binds no params, inline the value and quote strings yourself (or use a `{{token}}`):\n\n```js\nconst email = pm.response.json().data.user.email;\nconst res = await pm.db.query({\n  connectionId: \"…\",\n  query: `SELECT id FROM users WHERE email = '${email}'`,\n});\npm.expect(res.rowCount).to.be.above(0);\n```\n\nNotes: a trailing `;` is stripped (except Oracle PL/SQL blocks, which keep it). **Oracle** returns column names UPPERCASE — read `res.rows[0].EMAIL`, not `.email`. `res.rowCount` is the row count for SELECT and the affected-row count for INSERT/UPDATE/DELETE.\n\n## SQL Server (mssql)\nSingle statement per query; a trailing `;` is stripped; `GO` batch separators are REJECTED (client-tool syntax, not T-SQL). Positional params bind as named inputs: `params[0]` → `@p1`, `params[1]` → `@p2`… (scenario db node only — `pm.db.query` has no params).\n\n```sql\nSELECT TOP 1 id, amount FROM dbo.orders WHERE customer_id = @p1 ORDER BY created_at DESC\n```\n\n## Redis (`pm.redis.command`)\n`command` is a single string. Supported commands: **GET, SET, DEL, EXISTS, TTL, HGET, HSET, HGETALL, HDEL, LPUSH, RPUSH, LRANGE, LLEN, SADD, SMEMBERS, SISMEMBER, INCR, DECR, INCRBY, EXPIRE, PERSIST, TYPE, ZADD, ZRANGE, ZSCORE, SCAN**. Quote a value that contains spaces.\n\nStructured replies land in `res.result` as real values: `HGETALL` → object, `LRANGE`/`SMEMBERS`/`ZRANGE` → array, `EXISTS`/`SISMEMBER`/`EXPIRE`/`PERSIST` → boolean; `res.resultText` is the stringified form. `SCAN pattern [count]` is Callman-managed: the cursor loop runs internally (capped at 1000 keys / 100 iterations) and returns `{ keys, count, truncated }` — no raw cursors.\n\n```js\nconst res = await pm.redis.command({ connectionId: \"…\", command: `GET session:${id}` });\npm.expect(res.success).to.be.true;\n// res.result / res.resultText hold the value; res.commandName, res.key are set.\n```\n",
+    "diagram-components": "<!-- GENERATED FILE — do not edit by hand. Source: callman_core (npm run ai:packs). -->\n\n# Diagram components and edge notation\n\nA diagram node's `type` MUST be one of the keys below (`callman-core` `DIAGRAM_COMPONENT_CATALOG`). Sizes are the defaults the studio uses; `container` types hold children via `parentId`.\n\n## Edge notation\n\n| Semantic | Meaning | Style tuple |\n| --- | --- | --- |\n| `sync` | Request / response call | dashed=false, strokeWidth=1.5 |\n| `async` | Fire-and-forget, event or callback | dashed=true, dashPattern=\"6 4\", strokeWidth=1.5 |\n| `fallback` | Retry, fallback or optional path | dashed=true, dashPattern=\"1 3\", strokeWidth=1.25 |\n| `bus` | Message bus or stream | dashed=false, strokeWidth=3 |\n\n## Generic (`generic`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `line` | Line | 160×0 | connector, edge, link |\n| `arrow` | Arrow | 160×0 | connector, directed, link |\n| `line.dashed` | Dashed Line | 160×0 | dotted, connector |\n| `rect` | Rectangle | 140×64 | box, card |\n| `square` | Square | 90×90 |  |\n| `ellipse` | Ellipse | 140×64 | oval |\n| `circle` | Circle | 90×90 |  |\n| `diamond` | Diamond | 140×64 | rhombus |\n| `triangle` | Triangle | 140×64 |  |\n| `hexagon` | Hexagon | 140×64 |  |\n| `pentagon` | Pentagon | 140×64 |  |\n| `octagon` | Octagon | 140×64 |  |\n| `parallelogram` | Parallelogram | 140×64 |  |\n| `trapezoid` | Trapezoid | 140×64 |  |\n| `cylinder` | Cylinder | 140×64 | can, tube |\n| `cloud-shape` | Cloud | 140×64 |  |\n| `callout` | Callout | 140×64 | speech, bubble |\n| `text` | Text | 120×36 |  |\n| `sticky` | Sticky note | 140×100 | postit, comment |\n| `card` | Card | 140×64 |  |\n| `frame` | Frame / Container (container) | 220×160 | group, container, boundary |\n| `pool.horizontal` | Pool (horizontal) (swimlane) | 360×220 | swimlane, lane, container, subsystem |\n| `pool.vertical` | Pool (vertical) (swimlane) | 220×360 | swimlane, lane, container, subsystem |\n| `image` | Image | 140×64 | picture |\n\n## Flowchart (`flowchart`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `flow.process` | Process | 140×64 | step, action |\n| `flow.alt-process` | Alternate Process | 140×64 |  |\n| `flow.decision` | Decision | 140×100 | if, branch |\n| `flow.terminator` | Start / End | 130×56 | terminator, begin, stop |\n| `flow.data` | Data (I/O) | 140×64 | input, output, io |\n| `flow.document` | Document | 140×64 |  |\n| `flow.multi-document` | Multi-Document | 140×64 |  |\n| `flow.predefined` | Predefined Process | 140×64 | subroutine |\n| `flow.manual-input` | Manual Input | 140×64 |  |\n| `flow.manual-op` | Manual Operation | 140×64 |  |\n| `flow.preparation` | Preparation | 140×64 |  |\n| `flow.stored-data` | Stored Data | 140×64 |  |\n| `flow.database` | Database | 140×64 | db, store |\n| `flow.display` | Display | 140×64 |  |\n| `flow.delay` | Delay | 140×64 |  |\n| `flow.merge` | Merge | 140×64 |  |\n| `flow.or` | Or | 140×64 |  |\n| `flow.connector` | On-page Connector | 48×48 |  |\n| `flow.off-page` | Off-page Connector | 140×64 |  |\n| `flow.annotation` | Annotation | 140×64 |  |\n\n## UML (`uml`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `uml.class` | Class | 140×64 | entity |\n| `uml.abstract` | Abstract Class | 140×64 |  |\n| `uml.interface` | Interface | 140×64 |  |\n| `uml.enum` | Enum | 140×64 |  |\n| `uml.object` | Object | 140×64 |  |\n| `uml.package` | Package | 140×64 |  |\n| `uml.component` | Component | 140×64 |  |\n| `uml.node` | Node / Deployment | 140×64 |  |\n| `uml.actor` | Actor | 60×100 | user, role |\n| `uml.usecase` | Use Case | 140×64 |  |\n| `uml.boundary` | Boundary | 140×64 |  |\n| `uml.control` | Control | 140×64 |  |\n| `uml.entity` | Entity | 140×64 |  |\n| `uml.state` | State | 140×64 |  |\n| `uml.initial` | Initial State | 36×36 |  |\n| `uml.final` | Final State | 40×40 |  |\n| `uml.decision` | Decision | 60×60 |  |\n| `uml.note` | Note / Comment | 140×64 | comment |\n\n## ERD (`erd`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `erd.entity` | Entity | 140×64 | table |\n| `erd.weak-entity` | Weak Entity | 140×64 |  |\n| `erd.attribute` | Attribute | 140×64 |  |\n| `erd.key-attribute` | Key Attribute | 140×64 | pk, primary key |\n| `erd.multivalued` | Multivalued Attribute | 140×64 |  |\n| `erd.derived` | Derived Attribute | 140×64 |  |\n| `erd.relationship` | Relationship | 140×64 |  |\n| `erd.identifying` | Identifying Relationship | 140×64 |  |\n\n## Architecture (`networking`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `net.user` | User / Client | 60×100 | client, person |\n| `net.admin` | Admin | 60×100 |  |\n| `net.browser` | Browser | 140×64 |  |\n| `net.mobile` | Mobile Device | 90×130 | phone |\n| `net.desktop` | Desktop | 140×64 |  |\n| `net.iot` | IoT Device | 140×64 |  |\n| `net.server` | Server | 140×64 |  |\n| `net.service` | Service | 140×64 | microservice |\n| `net.monolith` | Monolith | 140×64 |  |\n| `net.api-gateway` | API Gateway | 140×64 | api, gateway |\n| `net.load-balancer` | Load Balancer | 140×64 | lb |\n| `net.reverse-proxy` | Reverse Proxy | 140×64 | proxy |\n| `net.firewall` | Firewall | 140×64 | waf |\n| `net.router` | Router | 140×64 |  |\n| `net.switch` | Switch | 140×64 |  |\n| `net.dns` | DNS | 140×64 |  |\n| `net.cdn` | CDN | 140×64 | edge |\n| `net.cache` | Cache | 140×64 |  |\n| `net.queue` | Queue | 140×64 | mq |\n| `net.websocket` | Web Socket | 140×64 | ws |\n| `net.rest` | REST endpoint | 140×64 | http, api |\n| `net.internet` | Internet / Cloud | 140×64 | wan |\n| `net.datacenter` | Datacenter | 140×64 |  |\n| `net.container` | Container | 140×64 |  |\n| `net.pod` | Pod | 140×64 |  |\n| `net.vm` | Virtual Machine | 140×64 | vm |\n\n## Databases (`database`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `db.postgres` | PostgreSQL | 176×56 | postgres, pg |\n| `db.mysql` | MySQL | 176×56 |  |\n| `db.mariadb` | MariaDB | 176×56 |  |\n| `db.mongodb` | MongoDB | 176×56 | mongo |\n| `db.redis` | Redis | 176×56 |  |\n| `db.sqlite` | SQLite | 176×56 |  |\n| `db.mssql` | MS SQL Server | 176×56 | sqlserver, mssql |\n| `db.oracle` | Oracle | 176×56 |  |\n| `db.cassandra` | Cassandra | 176×56 |  |\n| `db.elasticsearch` | Elasticsearch | 176×56 | elastic, es |\n| `db.neo4j` | Neo4j | 176×56 | graph |\n| `db.couchdb` | CouchDB | 176×56 | couch |\n| `db.couchbase` | Couchbase | 176×56 |  |\n| `db.clickhouse` | ClickHouse | 176×56 |  |\n| `db.cockroachdb` | CockroachDB | 176×56 | cockroach |\n| `db.influxdb` | InfluxDB | 176×56 | influx, tsdb |\n| `db.snowflake` | Snowflake | 176×56 |  |\n| `db.supabase` | Supabase | 176×56 |  |\n\n## Messaging (`messaging`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `mq.kafka` | Apache Kafka | 176×56 | kafka |\n| `mq.rabbitmq` | RabbitMQ | 176×56 | rabbit, amqp |\n| `mq.nats` | NATS | 176×56 |  |\n| `mq.pulsar` | Apache Pulsar | 176×56 | pulsar |\n| `mq.mqtt` | MQTT | 176×56 |  |\n| `mq.pubsub` | Pub/Sub | 176×56 | pubsub |\n| `mq.activemq` | ActiveMQ | 176×56 | jms |\n\n## Languages (`language`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `lang.node` | Node.js | 176×56 | node, js runtime |\n| `lang.python` | Python | 176×56 | py |\n| `lang.java` | Java | 176×56 | jvm |\n| `lang.go` | Go | 176×56 | golang |\n| `lang.rust` | Rust | 176×56 |  |\n| `lang.dotnet` | C# / .NET | 176×56 | csharp, c# |\n| `lang.typescript` | TypeScript | 176×56 | ts |\n| `lang.javascript` | JavaScript | 176×56 | js |\n| `lang.ruby` | Ruby | 176×56 |  |\n| `lang.php` | PHP | 176×56 |  |\n| `lang.kotlin` | Kotlin | 176×56 |  |\n| `lang.swift` | Swift | 176×56 |  |\n| `lang.scala` | Scala | 176×56 |  |\n| `lang.elixir` | Elixir | 176×56 |  |\n| `lang.cpp` | C++ | 176×56 | cpp |\n\n## Frameworks (`framework`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `fw.express` | Express | 176×56 |  |\n| `fw.nestjs` | NestJS | 176×56 | nest |\n| `fw.spring` | Spring Boot | 176×56 | spring |\n| `fw.django` | Django | 176×56 |  |\n| `fw.flask` | Flask | 176×56 |  |\n| `fw.fastapi` | FastAPI | 176×56 |  |\n| `fw.rails` | Rails | 176×56 | ruby on rails |\n| `fw.laravel` | Laravel | 176×56 |  |\n| `fw.dotnet` | .NET | 176×56 |  |\n| `fw.react` | React | 176×56 |  |\n| `fw.vue` | Vue | 176×56 | vuejs |\n| `fw.angular` | Angular | 176×56 |  |\n| `fw.next` | Next.js | 176×56 | nextjs |\n| `fw.nuxt` | Nuxt | 176×56 | nuxtjs |\n| `fw.svelte` | Svelte | 176×56 | sveltekit |\n| `fw.electron` | Electron | 176×56 |  |\n| `fw.tailwind` | Tailwind | 176×56 | tailwindcss |\n| `fw.graphql` | GraphQL | 176×56 |  |\n\n## DevOps / CI-CD (`devops`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `ops.docker` | Docker | 176×56 |  |\n| `ops.k8s` | Kubernetes | 176×56 | k8s |\n| `ops.nginx` | Nginx | 176×56 |  |\n| `ops.haproxy` | HAProxy | 176×56 | lb |\n| `ops.traefik` | Traefik | 176×56 | traefik |\n| `ops.terraform` | Terraform | 176×56 | iac |\n| `ops.ansible` | Ansible | 176×56 |  |\n| `ops.jenkins` | Jenkins | 176×56 | ci |\n| `ops.gha` | GitHub Actions | 176×56 | ci, actions |\n| `ops.gitlab` | GitLab CI | 176×56 | ci |\n| `ops.argocd` | ArgoCD | 176×56 | gitops |\n| `ops.helm` | Helm | 176×56 |  |\n| `ops.istio` | Istio | 176×56 | service mesh |\n| `ops.envoy` | Envoy | 176×56 | proxy |\n| `ops.consul` | Consul | 176×56 |  |\n| `ops.vault` | Vault | 176×56 | secrets |\n| `ops.pm2` | PM2 | 176×56 |  |\n| `ops.maven` | Maven | 176×56 | build |\n\n## Auth / Identity (`auth`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `auth.oidc` | OpenID Connect | 176×56 | oidc |\n| `auth.jwt` | JWT | 176×56 | token |\n| `auth.keycloak` | Keycloak | 176×56 |  |\n| `auth.auth0` | Auth0 | 176×56 |  |\n| `auth.okta` | Okta | 176×56 |  |\n| `auth.firebase` | Firebase Auth | 176×56 | firebase |\n| `auth.oauth` | OAuth 2.0 | 176×56 | oauth |\n| `auth.saml` | SAML | 176×56 |  |\n| `auth.ldap` | LDAP | 176×56 |  |\n\n## Observability (`observability`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `obs.prometheus` | Prometheus | 176×56 | metrics |\n| `obs.grafana` | Grafana | 176×56 | dashboard |\n| `obs.datadog` | Datadog | 176×56 |  |\n| `obs.sentry` | Sentry | 176×56 | errors |\n| `obs.elasticsearch` | Elasticsearch | 176×56 | elk |\n| `obs.logstash` | Logstash | 176×56 | elk |\n| `obs.kibana` | Kibana | 176×56 | elk |\n| `obs.jaeger` | Jaeger | 176×56 | tracing |\n| `obs.otel` | OpenTelemetry | 176×56 | otel, tracing |\n| `obs.newrelic` | New Relic | 176×56 |  |\n\n## AWS (`aws`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `aws.ec2` | EC2 | 176×56 | aws |\n| `aws.lambda` | Lambda | 176×56 | aws |\n| `aws.s3` | S3 | 176×56 | aws |\n| `aws.ebs` | EBS | 176×56 | aws |\n| `aws.efs` | EFS | 176×56 | aws |\n| `aws.rds` | RDS | 176×56 | aws |\n| `aws.aurora` | Aurora | 176×56 | aws |\n| `aws.dynamodb` | DynamoDB | 176×56 | aws |\n| `aws.elasticache` | ElastiCache | 176×56 | aws |\n| `aws.redshift` | Redshift | 176×56 | aws |\n| `aws.vpc` | VPC | 176×56 | aws |\n| `aws.subnet` | Subnet | 176×56 | aws |\n| `aws.internet-gateway` | Internet Gateway | 176×56 | aws |\n| `aws.nat-gateway` | NAT Gateway | 176×56 | aws |\n| `aws.elb` | ELB | 176×56 | aws |\n| `aws.alb` | ALB | 176×56 | aws |\n| `aws.nlb` | NLB | 176×56 | aws |\n| `aws.api-gateway` | API Gateway | 176×56 | aws |\n| `aws.cloudfront` | CloudFront | 176×56 | aws |\n| `aws.route-53` | Route 53 | 176×56 | aws |\n| `aws.sqs` | SQS | 176×56 | aws |\n| `aws.sns` | SNS | 176×56 | aws |\n| `aws.eventbridge` | EventBridge | 176×56 | aws |\n| `aws.kinesis` | Kinesis | 176×56 | aws |\n| `aws.step-functions` | Step Functions | 176×56 | aws |\n| `aws.ecs` | ECS | 176×56 | aws |\n| `aws.eks` | EKS | 176×56 | aws |\n| `aws.fargate` | Fargate | 176×56 | aws |\n| `aws.ecr` | ECR | 176×56 | aws |\n| `aws.iam` | IAM | 176×56 | aws |\n| `aws.cognito` | Cognito | 176×56 | aws |\n| `aws.secrets-manager` | Secrets Manager | 176×56 | aws |\n| `aws.kms` | KMS | 176×56 | aws |\n| `aws.cloudwatch` | CloudWatch | 176×56 | aws |\n| `aws.cloudtrail` | CloudTrail | 176×56 | aws |\n| `aws.glue` | Glue | 176×56 | aws |\n| `aws.athena` | Athena | 176×56 | aws |\n| `aws.sagemaker` | SageMaker | 176×56 | aws |\n| `aws.appsync` | AppSync | 176×56 | aws |\n| `aws.amplify` | Amplify | 176×56 | aws |\n\n## Azure (`azure`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `azure.virtual-machine` | Virtual Machine | 176×56 | azure |\n| `azure.vm-scale-set` | VM Scale Set | 176×56 | azure |\n| `azure.app-service` | App Service | 176×56 | azure |\n| `azure.functions` | Functions | 176×56 | azure |\n| `azure.container-instances` | Container Instances | 176×56 | azure |\n| `azure.aks` | AKS | 176×56 | azure |\n| `azure.container-registry` | Container Registry | 176×56 | azure |\n| `azure.blob-storage` | Blob Storage | 176×56 | azure |\n| `azure.files` | Files | 176×56 | azure |\n| `azure.disk` | Disk | 176×56 | azure |\n| `azure.sql-database` | SQL Database | 176×56 | azure |\n| `azure.cosmos-db` | Cosmos DB | 176×56 | azure |\n| `azure.cache-for-redis` | Cache for Redis | 176×56 | azure |\n| `azure.synapse` | Synapse | 176×56 | azure |\n| `azure.virtual-network` | Virtual Network | 176×56 | azure |\n| `azure.load-balancer` | Load Balancer | 176×56 | azure |\n| `azure.application-gateway` | Application Gateway | 176×56 | azure |\n| `azure.front-door` | Front Door | 176×56 | azure |\n| `azure.service-bus` | Service Bus | 176×56 | azure |\n| `azure.event-hub` | Event Hub | 176×56 | azure |\n| `azure.event-grid` | Event Grid | 176×56 | azure |\n| `azure.key-vault` | Key Vault | 176×56 | azure |\n| `azure.entra-id` | Entra ID | 176×56 | azure |\n| `azure.monitor` | Monitor | 176×56 | azure |\n| `azure.application-insights` | Application Insights | 176×56 | azure |\n| `azure.logic-apps` | Logic Apps | 176×56 | azure |\n| `azure.api-management` | API Management | 176×56 | azure |\n\n## GCP (`gcp`)\n\n| Type | Label | Default size | Aliases |\n| --- | --- | --- | --- |\n| `gcp.compute-engine` | Compute Engine | 176×56 | gcp, google |\n| `gcp.app-engine` | App Engine | 176×56 | gcp, google |\n| `gcp.cloud-functions` | Cloud Functions | 176×56 | gcp, google |\n| `gcp.cloud-run` | Cloud Run | 176×56 | gcp, google |\n| `gcp.gke` | GKE | 176×56 | gcp, google |\n| `gcp.artifact-registry` | Artifact Registry | 176×56 | gcp, google |\n| `gcp.cloud-storage` | Cloud Storage | 176×56 | gcp, google |\n| `gcp.persistent-disk` | Persistent Disk | 176×56 | gcp, google |\n| `gcp.cloud-sql` | Cloud SQL | 176×56 | gcp, google |\n| `gcp.cloud-spanner` | Cloud Spanner | 176×56 | gcp, google |\n| `gcp.firestore` | Firestore | 176×56 | gcp, google |\n| `gcp.bigtable` | Bigtable | 176×56 | gcp, google |\n| `gcp.bigquery` | BigQuery | 176×56 | gcp, google |\n| `gcp.memorystore` | Memorystore | 176×56 | gcp, google |\n| `gcp.vpc` | VPC | 176×56 | gcp, google |\n| `gcp.cloud-load-balancing` | Cloud Load Balancing | 176×56 | gcp, google |\n| `gcp.cloud-cdn` | Cloud CDN | 176×56 | gcp, google |\n| `gcp.cloud-dns` | Cloud DNS | 176×56 | gcp, google |\n| `gcp.pub-sub` | Pub/Sub | 176×56 | gcp, google |\n| `gcp.dataflow` | Dataflow | 176×56 | gcp, google |\n| `gcp.cloud-tasks` | Cloud Tasks | 176×56 | gcp, google |\n| `gcp.iam` | IAM | 176×56 | gcp, google |\n| `gcp.secret-manager` | Secret Manager | 176×56 | gcp, google |\n| `gcp.cloud-kms` | Cloud KMS | 176×56 | gcp, google |\n| `gcp.cloud-monitoring` | Cloud Monitoring | 176×56 | gcp, google |\n| `gcp.vertex-ai` | Vertex AI | 176×56 | gcp, google |\n",
+    "feature-policy": "<!-- GENERATED FILE — do not edit by hand. Source: callman_core (npm run ai:packs). -->\n\n# Script feature policy\n\nSome `pm.*` features can be disabled per execution context (ScriptFeaturePolicy). A disabled feature evaluates to `undefined` at top level; inside `pm.test` callbacks it throws so the test reports SKIPPED instead of failing.\n\nCapability-gated members:\n\n## database\n\n- `pm.db.query({ connectionId, query })`\n- `pm.db.pre`\n- `pm.db.post`\n\n## kafka\n\n- `pm.kafka.event()`\n- `pm.kafka.messages()`\n\n## redis\n\n- `pm.redis.command({ connectionId, command })`\n- `pm.redis.get(key)`\n- `pm.redis.results.pre`\n- `pm.redis.results.post`\n\nGeneration guidance: prefer declared pre/post queries and `pm.db.query` only when the user explicitly asks for database work; never assume kafka/redis capabilities exist unless the task mentions them.\n",
+    "pm-api": "<!-- GENERATED FILE — do not edit by hand. Source: callman_core (npm run ai:packs). -->\n\n# Callman `pm.*` scripting API\n\nScripts are plain JavaScript (top-level `await` allowed). Use ONLY the API below — anything else (fetch, require, process, Buffer, ...) is blocked by the sandbox.\n\n## pm.test\n\nRegister a named test. The callback's assertion failures mark the test failed without aborting the script.\n\n- `pm.test(name, fn)` — Runs fn (sync or async); pass/fail lands in the run's test results.\n\n## pm.expect\n\nChai-style assertions plus Jest-style matchers.\n\n- `pm.expect(value)` — Assertion chain. Equality: .to.equal(x) (identity), .to.eql(x) / .to.deep.equal(x) / .toEqual(x) (deep). Existence: .to.exist, .toBeDefined(), .toBeNull(). Strings/arrays: .to.include(x) / .toContain(x), .oneOf([..]). Numbers: .toBeGreaterThan / .toBeLessThan / .to.be.above(n) / .to.be.below(n). Types: .to.be.a('string'|'number'|...). Negation: .to.not.<...> / .not.<matcher>. Properties: .to.have.property('name', value?).\n- `pm.expect.fail(message?)` — Fails the surrounding test immediately.\n\n## pm.environment\n\nActive environment variables (alias: pm.env). Writes are scoped to the run and surface as variable mutations.\n\n- `pm.environment.get(key)` — Read a variable (string or undefined).\n- `pm.environment.set(key, value)` — Write a variable for subsequent steps.\n- `pm.environment.unset(key)` — Remove a variable.\n- `pm.environment.has(key)` — true when the key exists.\n- `pm.environment.clear()` — Remove every variable in the scope.\n- `pm.environment.toObject()` — Plain { key: value } snapshot.\n- `pm.environment.replaceIn(template)` — Resolve {{tokens}} inside a string.\n- `pm.environment.name` — Active environment's name.\n\n## pm.globals\n\nWorkspace-level global variables. Same surface as pm.environment.\n\n- `pm.globals.get(key)` — Read a global.\n- `pm.globals.set(key, value)` — Write a global for the run.\n- `pm.globals.unset(key)` — Remove a global.\n- `pm.globals.has(key)` — true when the key exists.\n- `pm.globals.clear()` — Remove every global in the scope.\n- `pm.globals.toObject()` — Plain snapshot.\n- `pm.globals.replaceIn(template)` — Resolve {{tokens}} inside a string.\n\n## pm.collectionVariables\n\nCollection-scoped variables that survive across requests within one collection run iteration.\n\n- `pm.collectionVariables.get(key)` — Read a collection variable.\n- `pm.collectionVariables.set(key, value)` — Write; persists across the iteration.\n- `pm.collectionVariables.unset(key)` — Remove a collection variable.\n- `pm.collectionVariables.has(key)` — true when the key exists.\n- `pm.collectionVariables.clear()` — Remove all collection variables.\n- `pm.collectionVariables.toObject()` — Plain snapshot.\n- `pm.collectionVariables.replaceIn(template)` — Resolve {{tokens}}.\n\n## pm.variables\n\nLayered read across all scopes (per-iteration > environment > globals) plus template resolution.\n\n- `pm.variables.get(key)` — Read through the precedence chain.\n- `pm.variables.set(key, value)` — Write to the run-local layer.\n- `pm.variables.unset(key)` — Remove from the run-local layer.\n- `pm.variables.has(key)` — true when any layer has the key.\n- `pm.variables.toObject()` — Merged snapshot.\n- `pm.variables.replaceIn(template)` — Resolve {{tokens}} in a string.\n- `pm.variables.resolve(template)` — Like replaceIn, but also resolves scenario node-output references.\n\n## pm.request\n\nThe outgoing request. Mutations only have effect in pre-request scripts (the call has not fired yet).\n\n- `pm.request.url` — Resolved URL string.\n- `pm.request.method` — HTTP method.\n- `pm.request.body` — Body snapshot (mode + content).\n- `pm.request.headers` — HeaderList: .all() .get(name) .has(name) .add({key,value}) .upsert({key,value}) .remove(name) .idx(i).\n- `pm.request.query` — Query params as a HeaderList.\n- `pm.request.getHeader(name)` — Read one header value.\n- `pm.request.setHeader(name, value)` — Set/replace a header. _(stages: pre-request, scenario-script)_\n- `pm.request.unsetHeader(name)` — Remove a header. _(stages: pre-request, scenario-script)_\n- `pm.request.getQueryParam(name)` — Read one query param.\n- `pm.request.setQueryParam(name, value)` — Set/replace a query param. _(stages: pre-request, scenario-script)_\n- `pm.request.unsetQueryParam(name)` — Remove a query param. _(stages: pre-request, scenario-script)_\n- `pm.request.setUrl(url)` — Replace the URL. _(stages: pre-request, scenario-script)_\n- `pm.request.setMethod(method)` — Replace the method. _(stages: pre-request, scenario-script)_\n- `pm.request.setRawBody(value)` — Replace the raw body (string or object → JSON). _(stages: pre-request, scenario-script)_\n\n## pm.response\n\nThe received response. Not available in pre-request scripts.\n\n- `pm.response.code` — Status code (number). _(stages: post-response, tests, scenario-script)_\n- `pm.response.status` — Status code (number, alias). _(stages: post-response, tests, scenario-script)_\n- `pm.response.statusText` — Status text. _(stages: post-response, tests, scenario-script)_\n- `pm.response.json()` — Parsed JSON body — call once into a const (`const body = pm.response.json()`); throws on non-JSON, so guard with try/catch or pm.response.to.be.json when the content type is uncertain. _(stages: post-response, tests, scenario-script)_\n- `pm.response.text()` — Raw body as string. _(stages: post-response, tests, scenario-script)_\n- `pm.response.rawBody` — Raw body string. _(stages: post-response, tests, scenario-script)_\n- `pm.response.headers` — Response HeaderList. _(stages: post-response, tests, scenario-script)_\n- `pm.response.responseTime` — Duration in ms. _(stages: post-response, tests, scenario-script)_\n- `pm.response.responseSize` — Body size in bytes. _(stages: post-response, tests, scenario-script)_\n- `pm.response.to.have.status(code)` — Assertion shortcuts; also .to.have.header/.jsonBody/.body and .to.be.ok/.json/.success/.clientError/... plus .to.not.<predicate>. _(stages: post-response, tests, scenario-script)_\n\n## pm.sendRequest\n\nFire an ad-hoc HTTP request from inside a script.\n\n- `pm.sendRequest(urlOrOptions, callback?)` — Options: { url, method, header: {name: value}, body }. Body accepts a plain object (auto-JSON) OR Postman style { mode: 'raw', raw: JSON.stringify({...}) } / { mode: 'urlencoded', urlencoded: [{key, value}] }. Prefer `const res = await pm.sendRequest({...})`; callback form gets (err, res). The response object is { code, status, statusText, headers, body, responseTime, json(), text() } — note it is NOT pm.response.\n\n## pm.db\n\nDatabase access (Oracle / MongoDB / PostgreSQL / MySQL). Disabled by feature policy in some contexts — tests then report SKIP.\n\n- `pm.db.query({ connectionId, query })` — Run an ad-hoc query — ALWAYS await it. SQL connections (Oracle/Postgres/MySQL): `query` is the SQL text. MongoDB: `query` is a JSON STRING of a command object, e.g. `JSON.stringify({ collection: 'users', operation: 'findOne', filter: { email } })` — operation is find|findOne|aggregate|countDocuments|insertOne|updateOne|deleteOne|…, the match key is `filter` (NOT a `db.coll.find(...)` shell string and NOT `query`), and aggregate uses `pipeline`. Resolves to { success, error, rowCount, rows, firstRow(), connectionId, connectionName, connectionType, durationMs, executedAt }. firstRow is a FUNCTION: res.firstRow()?.STATUS (Oracle columns are UPPERCASE); for a Mongo existence check assert rowCount > 0. _(requires the database capability — may be disabled by feature policy)_\n- `pm.db.pre` — Result object of the declared pre-request DB query: { success, error, rowCount, rows, firstRow() }. Not a promise — read directly. _(requires the database capability — may be disabled by feature policy)_\n- `pm.db.post` — Result object of the declared post-response DB query (same shape as pm.db.pre). _(stages: post-response, tests)_ _(requires the database capability — may be disabled by feature policy)_\n\n## pm.kafka\n\nCaptured Kafka events from the request's Kafka tab listener.\n\n- `pm.kafka.event()` — The matched event's parsed payload (or null). _(stages: post-response, tests)_ _(requires the kafka capability — may be disabled by feature policy)_\n- `pm.kafka.messages()` — Every captured message in the listen window. _(stages: post-response, tests)_ _(requires the kafka capability — may be disabled by feature policy)_\n\n## pm.redis\n\nRun ad-hoc Redis commands and read results of declared pre/post commands.\n\n- `pm.redis.command({ connectionId, command })` — Run an ad-hoc Redis command (GET/SET/DEL/EXISTS/TTL) — ALWAYS await it. Resolves to { success, error, result, resultText, commandName, key, connectionId, connectionName, command, resolvedCommand, durationMs, executedAt }. Omit connectionId to use the request's configured Redis connection. _(requires the redis capability — may be disabled by feature policy)_\n- `pm.redis.get(key)` — Read a value already captured by a declared GET. _(requires the redis capability — may be disabled by feature policy)_\n- `pm.redis.results.pre` — Array of pre-stage command results (by line index). _(requires the redis capability — may be disabled by feature policy)_\n- `pm.redis.results.post` — Array of post-stage command results. _(stages: post-response, tests)_ _(requires the redis capability — may be disabled by feature policy)_\n\n## pm.random\n\nDeterministic-format random data generators.\n\n- `pm.random.uuid()` — UUID v4.\n- `pm.random.email()` — Random email address.\n- `pm.random.string(length?)` — Alphanumeric string.\n- `pm.random.int(min, max)` — Integer in range.\n- `pm.random.bigdecimal(min, max, scale)` — Decimal with given scale.\n- `pm.random.boolean()` — true/false.\n- `pm.random.phone()` — Phone number string.\n- `pm.random.name()` — Person name.\n- `pm.random.date(format?)` — Date string.\n\n## pm.counter\n\nMonotonic counter scoped to the run.\n\n- `pm.counter.next()` — Next value (starts at 1).\n- `pm.counter.start(startAt?)` — Counter starting at a custom value.\n\n## pm.info\n\nExecution metadata snapshot.\n\n- `pm.info.eventName` — \"prerequest\" | \"test\".\n- `pm.info.iteration` — Zero-based data-driven iteration index.\n- `pm.info.iterationCount` — Total iterations — only meaningful in collection/data-driven runs. Never use it to gate token/cache logic in single sends.\n- `pm.info.requestName` — Current request's name.\n- `pm.info.requestId` — Current request's id.\n\n## pm.execution\n\nCollection-run flow control.\n\n- `pm.execution.setNextRequest(name)` — Jump to a named request next (collection runs).\n- `pm.execution.skipRequest()` — Skip the current request. _(stages: pre-request)_\n- `pm.execution.location` — Folder path of the current request.\n\n## pm.node\n\nScenario workflow context (only meaningful inside scenario script nodes).\n\n- `pm.node.nodeLabel` — Current node's label. _(stages: scenario-script)_\n- `pm.node.setNextRequest(name)` — Route the workflow to a named node. _(stages: scenario-script)_\n\n## pm.log\n\nStructured logging into the run report.\n\n- `pm.log(...args)` — Like console.log; entries land in the run's log panel.\n\n## CryptoJS\n\ncrypto-js global (NOT under pm.*).\n\n- `CryptoJS.SHA256(msg) / SHA1 / SHA512 / MD5` — Hashes; .toString() or .toString(CryptoJS.enc.Hex).\n- `CryptoJS.HmacSHA256(msg, key)` — HMAC family (SHA1/224/384/512, MD5 variants).\n- `CryptoJS.AES.encrypt(msg, key) / .decrypt(cipher, key)` — AES; decrypt result needs .toString(CryptoJS.enc.Utf8).\n- `CryptoJS.PBKDF2(password, salt, options)` — Key derivation.\n- `CryptoJS.enc.Utf8 / Base64 / Hex / Latin1` — Encoders for .toString(...).\n- `CryptoJS.lib.WordArray.create / random(n)` — Raw word arrays (e.g. random IVs).\n\n## _\n\nlodash global (NOT under pm.*).\n\n- `_.get(obj, path, default?) / _.pick / _.groupBy / _.sortBy / _.uniq / ...` — Full lodash surface for data wrangling.\n\n## timers\n\nSafe per-execution timer wrappers (callbacks never outlive the run).\n\n- `setTimeout(fn, ms) / clearTimeout(id)` — Use with await new Promise(r => setTimeout(r, ms)) for polling loops.\n- `setInterval(fn, ms) / clearInterval(id)` — Interval variant.\n\n## Stage rules\n\n- `pre-request`: runs BEFORE the HTTP call. `pm.response` does not exist; `pm.request` mutations take effect.\n- `post-response` / `tests`: run AFTER the call. `pm.response` is available; `pm.request` mutations have no effect.\n- `scenario-script`: a scenario Script node. Prior node outputs are readable via `pm.variables.resolve(\"{{NodeLabel.path}}\")`; the script's return value becomes the node output.\n- Members without a stage note are available in every stage.\n",
+    "sandbox-globals": "<!-- GENERATED FILE — do not edit by hand. Source: callman_core (npm run ai:packs). -->\n\n# Script sandbox — available and blocked globals\n\nThe sandbox is a Node `vm` context. Generated code must never reference a blocked global — the script fails at runtime.\n\n## Available built-ins\n\n`AggregateError`, `Array`, `ArrayBuffer`, `BigInt`, `BigInt64Array`, `BigUint64Array`, `Boolean`, `DataView`, `Date`, `Error`, `EvalError`, `Float32Array`, `Float64Array`, `Infinity`, `Int16Array`, `Int32Array`, `Int8Array`, `JSON`, `Map`, `Math`, `NaN`, `Number`, `Object`, `Promise`, `RangeError`, `ReferenceError`, `RegExp`, `Set`, `String`, `Symbol`, `SyntaxError`, `TextDecoder`, `TextEncoder`, `TypeError`, `URIError`, `URL`, `URLSearchParams`, `Uint16Array`, `Uint32Array`, `Uint8Array`, `Uint8ClampedArray`, `WeakMap`, `WeakSet`, `atob`, `btoa`, `decodeURIComponent`, `encodeURIComponent`, `isFinite`, `isNaN`, `parseFloat`, `parseInt`, `structuredClone`, `undefined`\n\nPlus the injected helpers: `pm`, `console`, `CryptoJS`, `_` (lodash), `setTimeout`/`clearTimeout`/`setInterval`/`clearInterval` (safe per-run wrappers).\n\n## Blocked (never use)\n\n`Buffer`, `Function`, `WebSocket`, `Worker`, `XMLHttpRequest`, `document`, `eval`, `exports`, `fetch`, `global`, `globalThis`, `importScripts`, `module`, `navigator`, `process`, `require`, `self`, `window`\n\nNotes:\n- No `fetch` — use `pm.sendRequest` for HTTP.\n- No `Buffer` — use `atob`/`btoa`/`TextEncoder`/`Uint8Array`.\n- No `require`/`import` — `CryptoJS` and `_` are already in scope.\n",
+    "templating": "<!-- GENERATED FILE — do not edit by hand. Source: callman_core (npm run ai:packs). -->\n\n# Template tokens (`{{...}}`)\n\nAnywhere a `{{...}}` is accepted (URLs, headers, bodies, DB queries, Kafka payloads, scenario node configs), substitution is PLAIN TEXT replacement — no quoting, no escaping. Quote SQL strings yourself (`WHERE id = '{{userId}}'`). A missing variable resolves to an empty string.\n\n## Variable lookups\n\n- `{{name}}` — environment → globals lookup.\n- `{{env.name}}` / `{{global.name}}` — forced scope.\n- `{{response.body.<path>}}` — current request's response (request context only; dot-indexed arrays: `items.0.id`).\n- `{{<NodeLabel>.<path>}}` — a prior scenario node's output (scenario context only; bracket-indexed arrays: `rows[0].id`).\n\n## Random generators\n\n| Token | Meaning | Example output |\n| --- | --- | --- |\n| `{{random.email}}` | Random email address | `sam.user42@example.com` |\n| `{{random.string}}` | Random alphanumeric string | `aZ19xPq20LmN` |\n| `{{random.uuid}}` | Random UUID v4 | `1d7fe6b6-6f47-4fa9-b57a-d2e1d285be51` |\n| `{{random.int}}` | Random integer | `48291` |\n| `{{random.bigdecimal}}` | Random decimal number | `1842.552190` |\n| `{{random.boolean}}` | Random boolean | `true` |\n| `{{random.phone}}` | Random phone number | `+15558675309` |\n| `{{random.date(\"YYYY-MM-DD\")}}` | Random date | `2026-04-06` |\n| `{{random.name}}` | Random human name | `Aylin Karimli` |\n\n## Counters\n\n| Token | Meaning | Example output |\n| --- | --- | --- |\n| `{{counter}}` | Incrementing counter per request | `1, 2, 3...` |\n| `{{counter.start(100)}}` | Counter starting at 100 | `100, 101, 102...` |\n\n## Postman-compatible `$` tokens\n\n| Token | Meaning | Example output |\n| --- | --- | --- |\n| `{{$guid}}` | Postman compat — UUID v4 | `1d7fe6b6-6f47-4fa9-b57a-d2e1d285be51` |\n| `{{$randomUUID}}` | Postman compat — UUID v4 | `1d7fe6b6-6f47-4fa9-b57a-d2e1d285be51` |\n| `{{$timestamp}}` | Postman compat — unix seconds | `1718793600` |\n| `{{$isoTimestamp}}` | Postman compat — ISO 8601 | `2026-05-18T10:24:00.123Z` |\n| `{{$randomInt}}` | Postman compat — 0-1000 | `482` |\n| `{{$randomBoolean}}` | Postman compat | `true` |\n| `{{$randomAlphaNumeric}}` | Postman compat — 8 chars | `aZ19xPq2` |\n| `{{$randomHexaDecimal}}` | Postman compat — 0xNNNNNNNN | `0x4f3a1c2d` |\n| `{{$randomString}}` | Postman compat — 12 chars | `aZ19xPq20LmN` |\n| `{{$randomFirstName}}` | Postman compat | `Aylin` |\n| `{{$randomLastName}}` | Postman compat | `Karimov` |\n| `{{$randomFullName}}` | Postman compat | `Aylin Karimov` |\n| `{{$randomUserName}}` | Postman compat | `aylin.karimov42` |\n| `{{$randomNamePrefix}}` | Postman compat | `Dr.` |\n| `{{$randomNameSuffix}}` | Postman compat | `Jr.` |\n| `{{$randomEmail}}` | Postman compat | `sam.user42@example.com` |\n| `{{$randomUrl}}` | Postman compat | `https://acme.io/q1w2e3` |\n| `{{$randomDomainName}}` | Postman compat | `acme.io` |\n| `{{$randomDomainSuffix}}` | Postman compat | `io` |\n| `{{$randomUserAgent}}` | Postman compat | `Mozilla/5.0 (...)` |\n| `{{$randomIP}}` | Postman compat — IPv4 | `192.168.1.42` |\n| `{{$randomIPV4}}` | Postman compat | `192.168.1.42` |\n| `{{$randomIPV6}}` | Postman compat | `fe80::1ff:fe23:4567:890a` |\n| `{{$randomMACAddress}}` | Postman compat | `1A:2B:3C:4D:5E:6F` |\n| `{{$randomPassword}}` | Postman compat | `x4Z9p2Aq!` |\n| `{{$randomSemver}}` | Postman compat | `3.7.42` |\n| `{{$randomPhoneNumber}}` | Postman compat | `+15558675309` |\n| `{{$randomCity}}` | Postman compat | `Baku` |\n| `{{$randomCountry}}` | Postman compat | `Azerbaijan` |\n| `{{$randomCountryCode}}` | Postman compat | `AZ` |\n| `{{$randomStreetAddress}}` | Postman compat | `742 Maple St` |\n| `{{$randomZipCode}}` | Postman compat | `10042` |\n| `{{$randomLatitude}}` | Postman compat | `40.412345` |\n| `{{$randomLongitude}}` | Postman compat | `-74.012345` |\n| `{{$randomCompanyName}}` | Postman compat | `Acme Labs Inc.` |\n| `{{$randomJobTitle}}` | Postman compat | `Senior Software Engineer` |\n| `{{$randomJobArea}}` | Postman compat | `Engineering` |\n| `{{$randomDepartment}}` | Postman compat | `Engineering` |\n| `{{$randomProduct}}` | Postman compat | `Acme Cloud` |\n| `{{$randomCatchPhrase}}` | Postman compat | `Scalable mesh` |\n| `{{$randomCreditCardMask}}` | Postman compat | `****-****-****-4242` |\n| `{{$randomCreditCardNumber}}` | Postman compat | `4242424242424242` |\n| `{{$randomBankAccount}}` | Postman compat | `0123456789` |\n| `{{$randomBankRoutingNumber}}` | Postman compat | `021000089` |\n| `{{$randomCurrencyCode}}` | Postman compat | `USD` |\n| `{{$randomPrice}}` | Postman compat | `42.99` |\n| `{{$randomTransactionType}}` | Postman compat | `payment` |\n| `{{$randomDatetime}}` | Postman compat | `2026-04-06T10:24:00.000Z` |\n| `{{$randomDatePast}}` | Postman compat | `2025-10-12T...` |\n| `{{$randomDateFuture}}` | Postman compat | `2026-11-04T...` |\n| `{{$randomDateRecent}}` | Postman compat — last 7 days | `2026-05-15T...` |\n| `{{$randomDateSoon}}` | Postman compat — next 7 days | `2026-05-22T...` |\n| `{{$randomTime}}` | Postman compat | `14:23:07` |\n| `{{$randomWeekday}}` | Postman compat | `Wednesday` |\n| `{{$randomMonth}}` | Postman compat | `April` |\n| `{{$randomColor}}` | Postman compat | `purple` |\n| `{{$randomHexColor}}` | Postman compat | `#A78BFA` |\n| `{{$randomWord}}` | Postman compat — lorem | `ipsum` |\n| `{{$randomWords}}` | Postman compat — lorem phrase | `lorem ipsum dolor` |\n| `{{$randomSentence}}` | Postman compat | `Lorem ipsum dolor sit amet.` |\n| `{{$randomParagraph}}` | Postman compat | `Lorem ipsum dolor sit amet...` |\n| `{{$randomFileName}}` | Postman compat | `q1w2e3r4.pdf` |\n| `{{$randomFileExt}}` | Postman compat | `json` |\n| `{{$randomFileType}}` | Postman compat | `image` |\n| `{{$randomMimeType}}` | Postman compat | `application/json` |\n| `{{$randomImageUrl}}` | Postman compat | `https://picsum.photos/400/300` |\n"
+};
+//# sourceMappingURL=aiPacks.js.map

package/dist/resources/generated/aiPacks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aiPacks.js","sourceRoot":"","sources":["../../../src/resources/generated/aiPacks.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAE9C,MAAM,CAAC,MAAM,QAAQ,GAA2B;IAC9C,YAAY,EAAE,wvHAAwvH;IACtwH,oBAAoB,EAAE,84eAA84e;IACp6e,gBAAgB,EAAE,q2BAAq2B;IACv3B,QAAQ,EAAE,+4YAA+4Y;IACz5Y,iBAAiB,EAAE,8gDAA8gD;IACjiD,YAAY,EAAE,u0LAAu0L;CACt1L,CAAC"}

package/dist/resources/index.d.ts

@@ -0,0 +1,4 @@
+import { type McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ToolContext } from "../context.js";
+export declare const registerResources: (server: McpServer, ctx: ToolContext) => void;
+//# sourceMappingURL=index.d.ts.map

package/dist/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAa3F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAiCjD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,SAAS,EAAE,KAAK,WAAW,KAAG,IA4IvE,CAAC"}

package/dist/resources/index.js

@@ -0,0 +1,114 @@
+import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { buildScenarioSystemPrompt, DIAGRAM_CATEGORY_LABELS, DIAGRAM_CATEGORY_ORDER, diagramComponentsByCategory, renderDbQueryReference, renderPmApiReference, safeParseDiagramDocument, } from "callman-core";
+import { diagramGraphView } from "../domain/diagram/summarize.js";
+import { compactRequestView, requestSummaryView } from "../domain/requestShape.js";
+import { scenarioFullView } from "../domain/scenario/summarize.js";
+import { safeStringify } from "../lib/truncate.js";
+import { loadTree, resolveCollection, resolveDiagram, resolveEnvironment, resolveRequest, resolveScenario } from "../tools/lookups.js";
+import { DIAGRAM_SCHEMA_DOC } from "./docs/diagramSchema.js";
+import { OVERVIEW_DOC } from "./docs/overview.js";
+import { REQUEST_SCHEMA_DOC } from "./docs/requestSchema.js";
+import { AI_PACKS } from "./generated/aiPacks.js";
+// Resources: reference material a model reads on demand (schemas, the
+// scripting API, the scenario node reference, the diagram component catalog
+// — all generated from callman-core so they can never drift from the engine)
+// plus live views of workspace data by URI.
+const text = (uri, body, mimeType = "text/markdown") => ({
+    contents: [{ uri: uri.href, mimeType, text: body }],
+});
+const json = (uri, body) => text(uri, safeStringify(body, 2), "application/json");
+// Template variables arrive percent-encoded ("Users%20API") — decode them so a
+// name with spaces works as a reference.
+const variable = (value) => {
+    const raw = Array.isArray(value) ? (value[0] ?? "") : (value ?? "");
+    try {
+        return decodeURIComponent(raw);
+    }
+    catch {
+        return raw;
+    }
+};
+export const registerResources = (server, ctx) => {
+    // ── static docs ──────────────────────────────────────────────────────
+    const staticDocs = [
+        { name: "docs-overview", uri: "callman://docs/overview", title: "How to work with Callman", description: "Conventions: whoami first, names as references, dryRun, confirm, secrets, scenarios, diagrams.", body: () => OVERVIEW_DOC },
+        { name: "docs-request-schema", uri: "callman://docs/request-schema", title: "Request input schema", description: "The compact request form (body variants, auth, variables, scripts, folder skeleton).", body: () => REQUEST_SCHEMA_DOC },
+        { name: "docs-scenario-nodes", uri: "callman://docs/scenario-nodes", title: "Scenario node reference", description: "Every scenario node type with its config fields and defaults, graph rules and examples (from callman-core).", body: () => buildScenarioSystemPrompt() },
+        { name: "docs-scripting-pm-api", uri: "callman://docs/scripting/pm-api", title: "Scripting: pm.* API", description: "The pm.* API available in pre-request / post-response / test scripts, per stage.", body: () => renderPmApiReference() },
+        { name: "docs-scripting-db-queries", uri: "callman://docs/scripting/db-queries", title: "Scripting: database queries", description: "How pm.db.* queries work per database provider.", body: () => renderDbQueryReference() },
+        { name: "docs-scripting-templating", uri: "callman://docs/scripting/templating", title: "Templating: {{variables}} and generators", description: "Variable resolution order and dynamic generators ({{$uuid}}, {{$randomInt}} …).", body: () => AI_PACKS.templating ?? "" },
+        { name: "docs-scripting-sandbox", uri: "callman://docs/scripting/sandbox", title: "Scripting: sandbox and feature policy", description: "Globals available in the script sandbox and the feature policy for DB/Kafka capabilities.", body: () => `${AI_PACKS["sandbox-globals"] ?? ""}\n\n${AI_PACKS["feature-policy"] ?? ""}` },
+        { name: "docs-diagram-schema", uri: "callman://docs/diagram-schema", title: "Diagram schema", description: "The compact diagram input, edge semantics, patch operations and the stored DiagramDocument.", body: () => DIAGRAM_SCHEMA_DOC },
+    ];
+    for (const doc of staticDocs) {
+        server.registerResource(doc.name, doc.uri, { title: doc.title, description: doc.description, mimeType: "text/markdown" }, async (uri) => text(uri, doc.body()));
+    }
+    // ── component catalog ────────────────────────────────────────────────
+    const catalog = () => {
+        const grouped = diagramComponentsByCategory();
+        return DIAGRAM_CATEGORY_ORDER.map((category) => ({
+            category,
+            label: DIAGRAM_CATEGORY_LABELS[category],
+            components: grouped[category].map((component) => ({
+                type: component.type,
+                label: component.label,
+                ...(component.aliases?.length ? { aliases: component.aliases } : {}),
+                ...(component.container ? { container: true } : {}),
+            })),
+        }));
+    };
+    server.registerResource("diagram-components", "callman://diagram/components", { title: "Diagram component catalog", description: "Every component type usable in create_diagram / patch_diagram, grouped by category. Use the `type` values verbatim.", mimeType: "application/json" }, async (uri) => json(uri, { categories: catalog(), note: "Use `type` verbatim as a node's type. Container components take children via `parent`." }));
+    server.registerResource("diagram-components-category", new ResourceTemplate("callman://diagram/components/{category}", {
+        list: undefined,
+        complete: { category: () => [...DIAGRAM_CATEGORY_ORDER] },
+    }), { title: "Diagram components in one category", description: `One category of the component catalog: ${DIAGRAM_CATEGORY_ORDER.join(", ")}.`, mimeType: "application/json" }, async (uri, variables) => {
+        const category = variable(variables.category);
+        const entry = catalog().find((group) => group.category === category);
+        if (!entry)
+            throw new Error(`Unknown category "${category}". Known: ${DIAGRAM_CATEGORY_ORDER.join(", ")}`);
+        return json(uri, entry);
+    });
+    // ── live workspace data ──────────────────────────────────────────────
+    server.registerResource("workspaces", "callman://workspaces", { title: "Your workspaces", description: "The workspaces the token can act in, with your role.", mimeType: "application/json" }, async (uri) => json(uri, { workspaces: await ctx.listWorkspaces() }));
+    server.registerResource("workspace-collections", new ResourceTemplate("callman://workspace/{workspace}/collections", { list: undefined }), { title: "Collections of a workspace", description: "Collections (id, name, counts) of a workspace by id or name.", mimeType: "application/json" }, async (uri, variables) => {
+        const ws = await ctx.resolveWorkspace(variable(variables.workspace));
+        const collections = await ctx.api.listAllCollections(ws.id);
+        return json(uri, { workspace: { id: ws.id, name: ws.name }, collections: collections.map((collection) => ({ id: collection.id, name: collection.name, requestCount: collection.requestCount ?? null, folderCount: collection.folderCount ?? null })) });
+    });
+    server.registerResource("workspace-environments", new ResourceTemplate("callman://workspace/{workspace}/environments", { list: undefined }), { title: "Environments of a workspace", description: "Environments with their variable keys (values masked by the server).", mimeType: "application/json" }, async (uri, variables) => {
+        const ws = await ctx.resolveWorkspace(variable(variables.workspace));
+        const { items } = await ctx.api.listEnvironments(ws.id);
+        return json(uri, { workspace: { id: ws.id, name: ws.name }, environments: items.map((environment) => ({ id: environment.id, name: environment.name, variableKeys: environment.variables.map((entry) => entry.key) })) });
+    });
+    server.registerResource("collection-tree", new ResourceTemplate("callman://collection/{collection}/tree", { list: undefined }), { title: "A collection's folders and requests", description: "Folders and requests of a collection (id or name) in the default workspace.", mimeType: "application/json" }, async (uri, variables) => {
+        const ws = await ctx.resolveWorkspace();
+        const resolved = await resolveCollection(ctx, ws.id, variable(variables.collection));
+        const tree = await loadTree(ctx, ws.id, resolved.item.id);
+        return json(uri, { collection: { id: resolved.item.id, name: resolved.item.name }, folders: tree.folders, requests: tree.requests.map(requestSummaryView) });
+    });
+    server.registerResource("request", new ResourceTemplate("callman://request/{request}", { list: undefined }), { title: "A saved request", description: "One request (id or unique name) in the default workspace, secrets masked.", mimeType: "application/json" }, async (uri, variables) => {
+        const ws = await ctx.resolveWorkspace();
+        const { request } = await resolveRequest(ctx, ws.id, variable(variables.request));
+        return json(uri, { request: compactRequestView(request, { full: true }) });
+    });
+    server.registerResource("environment", new ResourceTemplate("callman://environment/{environment}", { list: undefined }), { title: "An environment", description: "One environment (id or name) in the default workspace, values masked by the server.", mimeType: "application/json" }, async (uri, variables) => {
+        const ws = await ctx.resolveWorkspace();
+        const resolved = await resolveEnvironment(ctx, ws.id, variable(variables.environment));
+        const fresh = await ctx.api.getEnvironment(ws.id, resolved.item.id);
+        return json(uri, { environment: { id: fresh.id, name: fresh.name, variables: fresh.variables } });
+    });
+    server.registerResource("scenario", new ResourceTemplate("callman://scenario/{scenario}", { list: undefined }), { title: "A scenario", description: "One scenario (id or name): nodes with configs (clipped, secrets masked) and edges.", mimeType: "application/json" }, async (uri, variables) => {
+        const ws = await ctx.resolveWorkspaceOrNull();
+        const resolved = await resolveScenario(ctx, ws?.id ?? null, variable(variables.scenario));
+        return json(uri, { scenario: scenarioFullView(resolved.item) });
+    });
+    server.registerResource("diagram", new ResourceTemplate("callman://diagram/{diagram}", { list: undefined }), { title: "A diagram", description: "One diagram (id or name) as nodes/edges with edge semantics.", mimeType: "application/json" }, async (uri, variables) => {
+        const ref = variable(variables.diagram);
+        const resolved = await resolveDiagram(ctx, ref);
+        const parsed = safeParseDiagramDocument(resolved.item.document);
+        if (!parsed.ok)
+            throw new Error(`Stored diagram is invalid: ${parsed.errors.join("; ")}`);
+        return json(uri, { diagram: { id: resolved.item.id, name: resolved.item.name, canEdit: resolved.item.canEdit, ...diagramGraphView(parsed.document) } });
+    });
+};
+//# sourceMappingURL=index.js.map

package/dist/resources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3F,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,GAEzB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACvI,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,sEAAsE;AACtE,4EAA4E;AAC5E,6EAA6E;AAC7E,4CAA4C;AAE5C,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAQ,GAAG,eAAe,EAAsB,EAAE,CAAC,CAAC;IACxF,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,IAAa,EAAsB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAEpH,+EAA+E;AAC/E,yCAAyC;AACzC,MAAM,QAAQ,GAAG,CAAC,KAAoC,EAAU,EAAE;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAiB,EAAE,GAAgB,EAAQ,EAAE;IAC7E,wEAAwE;IACxE,MAAM,UAAU,GAAiG;QAC/G,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,yBAAyB,EAAE,KAAK,EAAE,0BAA0B,EAAE,WAAW,EAAE,gGAAgG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE;QACrO,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,sFAAsF,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE;QACzO,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,yBAAyB,EAAE,WAAW,EAAE,6GAA6G,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,yBAAyB,EAAE,EAAE;QAC5Q,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,iCAAiC,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,kFAAkF,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,oBAAoB,EAAE,EAAE;QAC5O,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,qCAAqC,EAAE,KAAK,EAAE,6BAA6B,EAAE,WAAW,EAAE,iDAAiD,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,sBAAsB,EAAE,EAAE;QAC7N,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,qCAAqC,EAAE,KAAK,EAAE,0CAA0C,EAAE,WAAW,EAAE,iFAAiF,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE;QAC3Q,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,kCAAkC,EAAE,KAAK,EAAE,uCAAuC,EAAE,WAAW,EAAE,2FAA2F,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE;QAChU,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,6FAA6F,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE;KAC3O,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClK,CAAC;IAED,wEAAwE;IACxE,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;QAC9C,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/C,QAAQ;YACR,KAAK,EAAE,uBAAuB,CAAC,QAAQ,CAAC;YACxC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAChD,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;IACF,MAAM,CAAC,gBAAgB,CACrB,oBAAoB,EACpB,8BAA8B,EAC9B,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,qHAAqH,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EACxM,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,CACpJ,CAAC;IACF,MAAM,CAAC,gBAAgB,CACrB,6BAA6B,EAC7B,IAAI,gBAAgB,CAAC,yCAAyC,EAAE;QAC9D,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,sBAAsB,CAAC,EAAE;KAC1D,CAAC,EACF,EAAE,KAAK,EAAE,oCAAoC,EAAE,WAAW,EAAE,0CAA0C,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAC1K,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAA6B,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,aAAa,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,MAAM,CAAC,gBAAgB,CACrB,YAAY,EACZ,sBAAsB,EACtB,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,sDAAsD,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAC/H,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CACrE,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,uBAAuB,EACvB,IAAI,gBAAgB,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACxF,EAAE,KAAK,EAAE,4BAA4B,EAAE,WAAW,EAAE,8DAA8D,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAClJ,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1P,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,wBAAwB,EACxB,IAAI,gBAAgB,CAAC,8CAA8C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACzF,EAAE,KAAK,EAAE,6BAA6B,EAAE,WAAW,EAAE,sEAAsE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAC3J,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3N,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,IAAI,gBAAgB,CAAC,wCAAwC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACnF,EAAE,KAAK,EAAE,qCAAqC,EAAE,WAAW,EAAE,6EAA6E,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAC1K,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC/J,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,SAAS,EACT,IAAI,gBAAgB,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACxE,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,2EAA2E,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EACpJ,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,aAAa,EACb,IAAI,gBAAgB,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAChF,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,qFAAqF,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAC7J,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,UAAU,EACV,IAAI,gBAAgB,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC1E,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,oFAAoF,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EACxJ,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,SAAS,EACT,IAAI,gBAAgB,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACxE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,8DAA8D,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EACjI,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1J,CAAC,CACF,CAAC;AAEJ,CAAC,CAAC"}

package/dist/run/executeCollection.d.ts

@@ -0,0 +1,19 @@
+import { type ConnectionRuntimeMap, type ExecutionResult } from "callman-core";
+import type { RunnableCollection, RunnableRequest, RunOutcome } from "./types.js";
+export interface ExecuteOptions {
+    collection: RunnableCollection;
+    env: Record<string, unknown>;
+    connections?: ConnectionRuntimeMap;
+    bail?: boolean;
+    only?: string[] | null;
+    deadlineMs?: number;
+    onProgress?: (input: {
+        index: number;
+        total: number;
+        request: RunnableRequest;
+        result: ExecutionResult;
+    }) => void;
+}
+export declare const requestFailed: (result: ExecutionResult) => boolean;
+export declare const executeCollection: ({ collection, env, connections, bail, only, deadlineMs, onProgress, }: ExecuteOptions) => Promise<RunOutcome>;
+//# sourceMappingURL=executeCollection.d.ts.map

package/dist/run/executeCollection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeCollection.d.ts","sourceRoot":"","sources":["../../src/run/executeCollection.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+C,KAAK,oBAAoB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAE5H,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQlF,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,eAAe,CAAA;KAAE,KAAK,IAAI,CAAC;CACnH;AAED,eAAO,MAAM,aAAa,GAAI,QAAQ,eAAe,KAAG,OASvD,CAAC;AASF,eAAO,MAAM,iBAAiB,GAAU,uEAQrC,cAAc,KAAG,OAAO,CAAC,UAAU,CA6ErC,CAAC"}

package/dist/run/executeCollection.js

@@ -0,0 +1,89 @@
+import { EnvStore, runRequest, runRequestWithDataset } from "callman-core";
+export const requestFailed = (result) => {
+    if (typeof result.passed === "boolean")
+        return !result.passed;
+    // Same rule as callme-cli (summary.ts): status 0 = transport failure.
+    return (result.status === 0 ||
+        result.status >= 400 ||
+        result.scriptResults.some((test) => test.status === "FAIL") ||
+        result.contractResults.some((test) => test.status === "FAIL"));
+};
+const diffEnv = (before, after, set, unset) => {
+    for (const key of Object.keys(after)) {
+        if (!(key in before) || before[key] !== after[key])
+            set.add(key);
+    }
+    for (const key of Object.keys(before))
+        if (!(key in after))
+            unset.add(key);
+};
+export const executeCollection = async ({ collection, env, connections = {}, bail = false, only = null, deadlineMs, onProgress, }) => {
+    const envStore = new EnvStore(env);
+    const results = [];
+    const setKeys = new Set();
+    const unsetKeys = new Set();
+    const startedAt = Date.now();
+    let previousResponse = null;
+    let bailed = false;
+    const featurePolicy = {
+        database: collection.runnerSettings?.database !== false,
+        kafka: false,
+    };
+    const wanted = only ? new Set(only) : null;
+    const runnable = collection.requests.filter((request) => request.isEnabledInRunner !== false && (!wanted || wanted.has(request.id)));
+    for (const [index, request] of runnable.entries()) {
+        if (deadlineMs && Date.now() - startedAt > deadlineMs) {
+            bailed = true;
+            break;
+        }
+        const before = envStore.all();
+        const rows = request.dataContract?.rows ?? [];
+        if (rows.length > 0) {
+            const { iterations } = await runRequestWithDataset({ request, env: envStore, previousResponse, connections, featurePolicy }, { requestId: request.id, columns: request.dataContract?.columns ?? [], rows });
+            let rowBailed = false;
+            for (const iteration of iterations) {
+                const result = {
+                    requestId: request.id,
+                    requestName: `${request.name} [row ${iteration.rowIndex + 1}]`,
+                    status: iteration.status,
+                    duration: iteration.durationMs,
+                    response: iteration.response ?? null,
+                    request: iteration.request,
+                    scriptResults: iteration.scriptResults,
+                    contractResults: iteration.contractResults,
+                    passed: iteration.passed,
+                };
+                results.push(result);
+                onProgress?.({ index, total: runnable.length, request, result });
+                if (bail && !iteration.passed) {
+                    rowBailed = true;
+                    break;
+                }
+            }
+            diffEnv(before, envStore.all(), setKeys, unsetKeys);
+            previousResponse = null;
+            if (rowBailed) {
+                bailed = true;
+                break;
+            }
+            continue;
+        }
+        const outcome = await runRequest({ request, env: envStore, previousResponse, connections, featurePolicy });
+        diffEnv(before, envStore.all(), setKeys, unsetKeys);
+        previousResponse = outcome.response;
+        results.push(outcome.result);
+        onProgress?.({ index, total: runnable.length, request, result: outcome.result });
+        if (bail && requestFailed(outcome.result)) {
+            bailed = true;
+            break;
+        }
+    }
+    const passed = results.filter((result) => !requestFailed(result)).length;
+    return {
+        results,
+        summary: { total: results.length, passed, failed: results.length - passed },
+        envChanges: { set: [...setKeys].sort(), unset: [...unsetKeys].sort() },
+        bailed,
+    };
+};
+//# sourceMappingURL=executeCollection.js.map