funifier-mcp 0.3.10 → 0.3.11

package/dist/mcp/tools/permissions.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerPermissionsTool = registerPermissionsTool;
 const zod_1 = require("zod");
+const _backup_1 = require("./_backup");
 function parseJsonObject(value, label) {
     if (!value) {
         throw new Error(`'${label}' is required as a JSON object.`);
@@ -86,13 +87,121 @@ function upsertBy(items, candidate, matches) {
 function removeBy(items, matches) {
     return (Array.isArray(items) ? items : []).filter((item) => !matches(item));
 }
+/** The whole security document is the replayable unit for the 4 security-doc branches. */
+function securityPreImage(security) {
+    // Clone so the branch can mutate `security` afterwards without corrupting the snapshot.
+    return { existedBefore: true, preImage: structuredClone(security), resourceId: security._id };
+}
+/**
+ * Current studio role by `_id` (delete) or by full natural key `name`+`type`+`item` (save).
+ * Matching on `name` alone can hit the wrong role when a name repeats across `(type,item)`.
+ * Always records the natural key so a restore-to-absent can resolve the server `_id` later.
+ */
+async function rolePreImage(api, role) {
+    let found = null;
+    if (role._id) {
+        const byId = await api.getRoleById(role._id);
+        if (!byId) {
+            throw new Error(`Studio role '${role._id}' not found or unreadable. Mutation aborted to avoid a restore that would delete a live role.`);
+        }
+        found = byId;
+    }
+    else if (role.name && role.type && role.item) {
+        const roles = await api.listRolesStrict();
+        found = roles.find((r) => r.name === role.name && r.type === role.type && r.item === role.item) ?? null;
+    }
+    const naturalKey = found
+        ? { name: found.name, type: found.type, item: found.item }
+        : { name: role.name ?? "", type: role.type ?? "", item: role.item ?? "" };
+    return {
+        existedBefore: found !== null,
+        preImage: found,
+        resourceId: found?._id ?? role._id ?? naturalKey.name,
+        naturalKey,
+    };
+}
+/** Current assignment state for a principal, matched in `listRoleAssignments(item)`. */
+async function assignmentPreImage(api, pr) {
+    const assignments = await api.listRoleAssignmentsStrict(pr.item);
+    const found = assignments.find((a) => a.type === pr.type && a.item === pr.item && a.role === pr.role) ?? null;
+    return {
+        existedBefore: found !== null,
+        preImage: found,
+        resourceId: `${pr.type}:${pr.item}:${pr.role}`,
+        naturalKey: { type: pr.type, item: pr.item, role: pr.role },
+    };
+}
+/**
+ * The single chokepoint: serialize a pre-image to disk BEFORE the remote mutation.
+ * Throws (via {@link captureBackup}) on any IO/serialization failure, which the handler's
+ * try/catch turns into an `isError` response — aborting the mutation.
+ */
+function backupBeforeMutation(action, category, pre, serverUrl) {
+    const snapshot = {
+        version: 1,
+        action,
+        category,
+        resourceId: pre.resourceId,
+        naturalKey: pre.naturalKey,
+        existedBefore: pre.existedBefore,
+        capturedAt: new Date().toISOString(),
+        serverUrl,
+        preImage: pre.preImage,
+    };
+    try {
+        (0, _backup_1.captureBackup)(snapshot);
+    }
+    catch (error) {
+        throw new Error(`Backup write failed (mutation aborted): ${error.message}`);
+    }
+}
+async function capturePreImage(action, fn) {
+    try {
+        return await fn();
+    }
+    catch (error) {
+        throw new Error(`Failed to capture pre-image for ${action}: ${error.message}`);
+    }
+}
+/** Block cross-tenant restore when both snapshot and current connection record a serverUrl. */
+function assertSnapshotServerMatches(snapshot, currentServerUrl) {
+    if (snapshot.serverUrl && currentServerUrl && snapshot.serverUrl !== currentServerUrl) {
+        throw new Error(`Backup serverUrl mismatch: snapshot was captured from '${snapshot.serverUrl}' but current connection is '${currentServerUrl}'. Refusing cross-server restore.`);
+    }
+}
+/** Fetch the CURRENT state of the resource a snapshot targets — used for restore's own pre-write backup. */
+async function currentPreImage(api, snapshot) {
+    switch (snapshot.category) {
+        case "security":
+            return securityPreImage(await loadSecurityDocument(api));
+        case "studio-role": {
+            const nk = snapshot.naturalKey;
+            if (!nk || !nk.name) {
+                throw new Error("Studio-role snapshot missing naturalKey.");
+            }
+            return rolePreImage(api, nk);
+        }
+        case "studio-assignment": {
+            const key = snapshot.naturalKey;
+            if (!key || !key.type || !key.item || !key.role) {
+                throw new Error("Studio-assignment snapshot missing naturalKey.");
+            }
+            return assignmentPreImage(api, { type: key.type, item: key.item, role: key.role });
+        }
+        default:
+            throw new Error(`Unknown backup category: ${snapshot.category}`);
+    }
+}
 function registerPermissionsTool(server, apiHolder) {
     server.registerTool("funifier_permissions", {
         title: "Funifier Permissions Manager",
         description: "Manage Funifier permissions without mixing models. " +
             "API access permissions are stored in the gamification security document (apps[] and roles[] scopes). " +
             "Studio/UI permissions are stored in system roles (role collection) and assignments (principal_role). " +
-            "Use API actions for app_secret/scope/whitelist management, and Studio actions for page/api/limit permissions and role assignments.",
+            "Use API actions for app_secret/scope/whitelist management, and Studio actions for page/api/limit permissions and role assignments. " +
+            "Every mutating action writes a complete pre-image snapshot under .funifier/backups/ (or FUNIFIER_BACKUP_ROOT) BEFORE the remote write; " +
+            "use list_backups to see them and restore_backup (with backup_path) to roll a change back. " +
+            "Snapshots accumulate without automatic retention — prune .funifier/backups/ manually when needed.",
         inputSchema: {
             action: zod_1.z
                 .enum([
@@ -108,6 +217,8 @@ function registerPermissionsTool(server, apiHolder) {
                 "list_studio_assignments",
                 "assign_studio_role",
                 "unassign_studio_role",
+                "list_backups",
+                "restore_backup",
             ])
                 .describe("Permission operation to execute."),
             data: zod_1.z
@@ -130,6 +241,7 @@ function registerPermissionsTool(server, apiHolder) {
                 .optional()
                 .describe("Assignment principal type, if 'data' is not provided."),
             principal_item: zod_1.z.string().optional().describe("Assignment principal id, if 'data' is not provided."),
+            backup_path: zod_1.z.string().optional().describe("Path of a snapshot file to restore, required by restore_backup."),
         },
         annotations: {
             readOnlyHint: false,
@@ -137,9 +249,10 @@ function registerPermissionsTool(server, apiHolder) {
             idempotentHint: false,
             openWorldHint: true,
         },
-    }, async ({ action, data, app_secret, name, role_id, role_type, item, principal_type, principal_item }) => {
+    }, async ({ action, data, app_secret, name, role_id, role_type, item, principal_type, principal_item, backup_path }) => {
         try {
             const api = apiHolder.requireClient();
+            const serverUrl = apiHolder.getConnectionInfo?.().serverUrl ?? null;
             if (action === "list_api_apps") {
                 const security = await loadSecurityDocument(api);
                 return formatResult(`API applications (${security.apps?.length ?? 0})`, maskSecurityApplications(security.apps));
@@ -150,6 +263,7 @@ function registerPermissionsTool(server, apiHolder) {
                     throw new Error("API app requires 'name', 'app_secret', and 'scope'.");
                 }
                 const security = await loadSecurityDocument(api);
+                backupBeforeMutation("save_api_app", "security", securityPreImage(security), serverUrl);
                 security.apps = upsertBy(security.apps, app, (current) => current.app_secret === app.app_secret);
                 const saved = await saveSecurityDocument(api, security);
                 return formatResult("API app saved in security.apps", maskSecurityApplications(saved.apps));
@@ -157,6 +271,7 @@ function registerPermissionsTool(server, apiHolder) {
             if (action === "delete_api_app") {
                 const appSecret = requireAppSecret(app_secret);
                 const security = await loadSecurityDocument(api);
+                backupBeforeMutation("delete_api_app", "security", securityPreImage(security), serverUrl);
                 security.apps = removeBy(security.apps, (current) => current.app_secret === appSecret);
                 const saved = await saveSecurityDocument(api, security);
                 return formatResult("API app removed from security.apps", maskSecurityApplications(saved.apps));
@@ -171,6 +286,7 @@ function registerPermissionsTool(server, apiHolder) {
                     throw new Error("Security role requires 'name', 'timeout', and 'scope'.");
                 }
                 const security = await loadSecurityDocument(api);
+                backupBeforeMutation("save_security_role", "security", securityPreImage(security), serverUrl);
                 security.roles = upsertBy(security.roles, role, (current) => current.name === role.name);
                 const saved = await saveSecurityDocument(api, security);
                 return formatResult("Security role saved in security.roles", saved.roles ?? []);
@@ -178,6 +294,7 @@ function registerPermissionsTool(server, apiHolder) {
             if (action === "delete_security_role") {
                 const roleName = requireName(name);
                 const security = await loadSecurityDocument(api);
+                backupBeforeMutation("delete_security_role", "security", securityPreImage(security), serverUrl);
                 security.roles = removeBy(security.roles, (current) => current.name === roleName);
                 const saved = await saveSecurityDocument(api, security);
                 return formatResult("Security role removed from security.roles", saved.roles ?? []);
@@ -203,11 +320,13 @@ function registerPermissionsTool(server, apiHolder) {
                         throw new Error("Each permission requires 'type', 'object', and 'operations'.");
                     }
                 });
+                backupBeforeMutation("save_studio_role", "studio-role", await capturePreImage("save_studio_role", () => rolePreImage(api, role)), serverUrl);
                 const saved = await api.saveRole(role);
                 return formatResult("Studio role saved", saved);
             }
             if (action === "delete_studio_role") {
                 const id = requireRoleId(role_id);
+                backupBeforeMutation("delete_studio_role", "studio-role", await capturePreImage("delete_studio_role", () => rolePreImage(api, { _id: id })), serverUrl);
                 const result = await api.deleteRole(id);
                 return formatResult("Studio role deleted", result);
             }
@@ -217,14 +336,31 @@ function registerPermissionsTool(server, apiHolder) {
             }
             if (action === "assign_studio_role") {
                 const assignment = parsePrincipalRole(data, principal_type, principal_item, role_id);
+                backupBeforeMutation("assign_studio_role", "studio-assignment", await capturePreImage("assign_studio_role", () => assignmentPreImage(api, assignment)), serverUrl);
                 const saved = await api.assignRole(assignment);
                 return formatResult("Studio role assigned", saved);
             }
             if (action === "unassign_studio_role") {
                 const assignment = parsePrincipalRole(data, principal_type, principal_item, role_id);
+                backupBeforeMutation("unassign_studio_role", "studio-assignment", await capturePreImage("unassign_studio_role", () => assignmentPreImage(api, assignment)), serverUrl);
                 const result = await api.unassignRole(assignment);
                 return formatResult("Studio role unassigned", result);
             }
+            if (action === "list_backups") {
+                const snapshots = (0, _backup_1.listSnapshots)();
+                return formatResult(`Backups (${snapshots.length})`, snapshots);
+            }
+            if (action === "restore_backup") {
+                if (!backup_path)
+                    throw new Error("'backup_path' is required for restore_backup.");
+                // Read + validate first: a missing/corrupt/invalid file throws before any remote write.
+                const snapshot = (0, _backup_1.readSnapshot)((0, _backup_1.resolveBackupPath)(backup_path));
+                assertSnapshotServerMatches(snapshot, serverUrl);
+                // Restore is itself a critical mutation, so it takes its own pre-write backup of current state.
+                backupBeforeMutation("restore_backup", snapshot.category, await capturePreImage("restore_backup", () => currentPreImage(api, snapshot)), serverUrl);
+                const result = await (0, _backup_1.applySnapshot)(api, snapshot);
+                return formatResult(`Backup restored from ${backup_path}`, result);
+            }
             return {
                 content: [{ type: "text", text: `Unknown action: ${action}` }],
                 isError: true,

package/dist/mcp/tools/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/mcp/tools/permissions.ts"],"names":[],"mappings":";;AAuHA,0DAwKC;AA/RD,6BAAwB;AA0BxB,SAAS,eAAe,CAAI,KAAyB,EAAE,KAAa;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB,EAAE,aAAsB,EAAE,aAAsB,EAAE,MAAe;IACnH,IAAI,IAAI;QAAE,OAAO,eAAe,CAAgB,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAsC;QAC5C,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA6B;IACrD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAwB;IAC3C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAc;IACjD,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACvD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAuC;IACvE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,GAAG;QACN,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;KACvC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAQ;IAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAQ,EAAE,QAA0B;IACtE,OAAO,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAI,KAAsB,EAAE,SAAY,EAAE,OAA6B;IACtF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAI,KAAsB,EAAE,OAA6B;IACxE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAiB,EAAE,SAAoB;IAC7E,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,qDAAqD;YACrD,uGAAuG;YACvG,uGAAuG;YACvG,oIAAoI;QACtI,WAAW,EAAE;YACX,MAAM,EAAE,OAAC;iBACN,IAAI,CAAC;gBACJ,eAAe;gBACf,cAAc;gBACd,gBAAgB;gBAChB,qBAAqB;gBACrB,oBAAoB;gBACpB,sBAAsB;gBACtB,mBAAmB;gBACnB,kBAAkB;gBAClB,oBAAoB;gBACpB,yBAAyB;gBACzB,oBAAoB;gBACpB,sBAAsB;aACvB,CAAC;iBACD,QAAQ,CAAC,kCAAkC,CAAC;YAC/C,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,gFAAgF;gBAC9E,8DAA8D;gBAC9D,8IAA8I;gBAC9I,+GAA+G,CAClH;YACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACxF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YACxF,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;YAC5G,SAAS,EAAE,OAAC;iBACT,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;iBAC3C,QAAQ,EAAE;iBACV,QAAQ,CAAC,wCAAwC,CAAC;YACrD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;YAC3G,cAAc,EAAE,OAAC;iBACd,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;iBACzC,QAAQ,EAAE;iBACV,QAAQ,CAAC,uDAAuD,CAAC;YACpE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;SACtG;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE;QACrG,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAEtC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,OAAO,YAAY,CAAC,qBAAqB,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnH,CAAC;YAED,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,eAAe,CAAsB,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;gBACjG,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,gCAAgC,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9F,CAAC;YAED,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;gBACvF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,oCAAoC,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAClG,CAAC;YAED,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,OAAO,YAAY,CAAC,mBAAmB,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;YAED,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,eAAe,CAAe,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,uCAAuC,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBAClF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,2CAA2C,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAU,EAAE,EAAE;oBAC3C,IAAI,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;oBACvD,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;wBAAE,OAAO,KAAK,CAAC;oBAC7C,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,OAAO,YAAY,CAAC,iBAAiB,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,eAAe,CAAO,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;gBAC3F,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAsB,EAAE,EAAE;oBAClD,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;wBACrE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,YAAY,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACpC,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACxC,OAAO,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,4BAA4B,WAAW,CAAC,MAAM,GAAG,EAAE,WAAW,CAAC,CAAC;YACtF,CAAC;YAED,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;gBACrF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/C,OAAO,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;gBACrF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBAClD,OAAO,YAAY,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;YACxD,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;gBACvE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iCAAiC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/mcp/tools/permissions.ts"],"names":[],"mappings":";;AAgQA,0DAgOC;AAheD,6BAAwB;AAIxB,uCAUmB;AAuBnB,SAAS,eAAe,CAAI,KAAyB,EAAE,KAAa;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB,EAAE,aAAsB,EAAE,aAAsB,EAAE,MAAe;IACnH,IAAI,IAAI;QAAE,OAAO,eAAe,CAAgB,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAsC;QAC5C,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA6B;IACrD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAwB;IAC3C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAc;IACjD,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACvD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAuC;IACvE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,GAAG;QACN,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;KACvC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAQ;IAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAQ,EAAE,QAA0B;IACtE,OAAO,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAI,KAAsB,EAAE,SAAY,EAAE,OAA6B;IACtF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAI,KAAsB,EAAE,OAA6B;IACxE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAUD,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,QAA0B;IAClD,wFAAwF;IACxF,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAI,EAAE,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CACzB,GAAQ,EACR,IAAmE;IAEnE,IAAI,KAAK,GAAgB,IAAI,CAAC;IAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,GAAG,+FAA+F,CACxH,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAW,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;QAClD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAC1G,CAAC;IAED,MAAM,UAAU,GAAmB,KAAK;QACtC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;QAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAE5E,OAAO;QACL,aAAa,EAAE,KAAK,KAAK,IAAI;QAC7B,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI;QACrD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,kBAAkB,CAAC,GAAQ,EAAE,EAAiB;IAC3D,MAAM,WAAW,GAAoB,MAAM,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAC9G,OAAO;QACL,aAAa,EAAE,KAAK,KAAK,IAAI;QAC7B,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE;QAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;KAC5D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,MAAc,EAAE,QAAwB,EAAE,GAAa,EAAE,SAAwB;IAC7G,MAAM,QAAQ,GAAmB;QAC/B,OAAO,EAAE,CAAC;QACV,MAAM;QACN,QAAQ;QACR,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,SAAS;QACT,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC;IACF,IAAI,CAAC;QACH,IAAA,uBAAa,EAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,EAA2B;IACxE,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,2BAA2B,CAAC,QAAwB,EAAE,gBAA+B;IAC5F,IAAI,QAAQ,CAAC,SAAS,IAAI,gBAAgB,IAAI,QAAQ,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CACb,0DAA0D,QAAQ,CAAC,SAAS,gCAAgC,gBAAgB,mCAAmC,CAChK,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,eAAe,CAAC,GAAQ,EAAE,QAAwB;IAC/D,QAAQ,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC1B,KAAK,UAAU;YACb,OAAO,gBAAgB,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAwC,CAAC;YAC7D,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAuC,CAAC;YAC7D,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,kBAAkB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAA6B,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,4BAA6B,QAAkC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAiB,EAAE,SAAoB;IAC7E,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,qDAAqD;YACrD,uGAAuG;YACvG,uGAAuG;YACvG,qIAAqI;YACrI,yIAAyI;YACzI,4FAA4F;YAC5F,mGAAmG;QACrG,WAAW,EAAE;YACX,MAAM,EAAE,OAAC;iBACN,IAAI,CAAC;gBACJ,eAAe;gBACf,cAAc;gBACd,gBAAgB;gBAChB,qBAAqB;gBACrB,oBAAoB;gBACpB,sBAAsB;gBACtB,mBAAmB;gBACnB,kBAAkB;gBAClB,oBAAoB;gBACpB,yBAAyB;gBACzB,oBAAoB;gBACpB,sBAAsB;gBACtB,cAAc;gBACd,gBAAgB;aACjB,CAAC;iBACD,QAAQ,CAAC,kCAAkC,CAAC;YAC/C,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,gFAAgF;gBAC9E,8DAA8D;gBAC9D,8IAA8I;gBAC9I,+GAA+G,CAClH;YACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YACxF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YACxF,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;YAC5G,SAAS,EAAE,OAAC;iBACT,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;iBAC3C,QAAQ,EAAE;iBACV,QAAQ,CAAC,wCAAwC,CAAC;YACrD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;YAC3G,cAAc,EAAE,OAAC;iBACd,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;iBACzC,QAAQ,EAAE;iBACV,QAAQ,CAAC,uDAAuD,CAAC;YACpE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YACrG,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;SAC/G;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,EAAE;QAClH,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,CAAC;YAEpE,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,OAAO,YAAY,CAAC,qBAAqB,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnH,CAAC;YAED,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,eAAe,CAAsB,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;gBACxF,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;gBACjG,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,gCAAgC,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9F,CAAC;YAED,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,oBAAoB,CAAC,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC1F,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;gBACvF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,oCAAoC,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAClG,CAAC;YAED,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,OAAO,YAAY,CAAC,mBAAmB,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;YAED,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,eAAe,CAAe,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,oBAAoB,CAAC,oBAAoB,EAAE,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC9F,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,uCAAuC,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACjD,oBAAoB,CAAC,sBAAsB,EAAE,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;gBAChG,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBAClF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,2CAA2C,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAU,EAAE,EAAE;oBAC3C,IAAI,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;oBACvD,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;wBAAE,OAAO,KAAK,CAAC;oBAC7C,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,OAAO,YAAY,CAAC,iBAAiB,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,eAAe,CAAO,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;gBAC3F,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAsB,EAAE,EAAE;oBAClD,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;wBACrE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,oBAAoB,CAClB,kBAAkB,EAClB,aAAa,EACb,MAAM,eAAe,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EACxE,SAAS,CACV,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,YAAY,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACpC,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gBAClC,oBAAoB,CAClB,oBAAoB,EACpB,aAAa,EACb,MAAM,eAAe,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EACjF,SAAS,CACV,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACxC,OAAO,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBACxD,OAAO,YAAY,CAAC,4BAA4B,WAAW,CAAC,MAAM,GAAG,EAAE,WAAW,CAAC,CAAC;YACtF,CAAC;YAED,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;gBACrF,oBAAoB,CAClB,oBAAoB,EACpB,mBAAmB,EACnB,MAAM,eAAe,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EACtF,SAAS,CACV,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/C,OAAO,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;gBACrF,oBAAoB,CAClB,sBAAsB,EACtB,mBAAmB,EACnB,MAAM,eAAe,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EACxF,SAAS,CACV,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBAClD,OAAO,YAAY,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,IAAA,uBAAa,GAAE,CAAC;gBAClC,OAAO,YAAY,CAAC,YAAY,SAAS,CAAC,MAAM,GAAG,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAChC,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnF,wFAAwF;gBACxF,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAA,2BAAiB,EAAC,WAAW,CAAC,CAAC,CAAC;gBAC9D,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACjD,gGAAgG;gBAChG,oBAAoB,CAClB,gBAAgB,EAChB,QAAQ,CAAC,QAAQ,EACjB,MAAM,eAAe,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAC7E,SAAS,CACV,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAClD,OAAO,YAAY,CAAC,wBAAwB,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;YACrE,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;gBACvE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iCAAiC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/mcp/tools/permissions.test.js

@@ -1,31 +1,67 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 const vitest_1 = require("vitest");
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
 const permissions_1 = require("./permissions");
+const _backup_1 = require("./_backup");
+// Every mutating action now writes a snapshot to backupRoot(); redirect it to a temp dir
+// (via the FUNIFIER_BACKUP_ROOT seam) so tests never touch the real working tree.
+let backupDir;
+(0, vitest_1.beforeEach)(() => {
+    backupDir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), "funifier-perm-test-"));
+    process.env.FUNIFIER_BACKUP_ROOT = backupDir;
+});
+(0, vitest_1.afterEach)(() => {
+    delete process.env.FUNIFIER_BACKUP_ROOT;
+    fs_1.default.rmSync(backupDir, { recursive: true, force: true });
+});
+function readNewestSnapshot() {
+    const items = (0, _backup_1.listSnapshots)(backupDir);
+    if (items.length === 0)
+        throw new Error("no snapshot written");
+    return JSON.parse(fs_1.default.readFileSync(items[0].path, "utf8"));
+}
 const SECURITY = {
     _id: "game1",
     apps: [{ name: "Default", app_secret: "old-secret", scope: "read_all" }],
     roles: [{ name: "player", timeout: "1d", scope: "read_all,write_actionlog" }],
 };
 function fakeApi(overrides = {}) {
+    const roles = [
+        { _id: "r1", name: "Admin", type: "system", item: "system", permissions: [] },
+        { _id: "r2", name: "Game Editor", type: "gamification", item: "game1", permissions: [] },
+    ];
+    const assignments = [{ type: "user", item: "u1", role: "r1" }];
     return {
         queryCollection: vitest_1.vi.fn().mockResolvedValue([structuredClone(SECURITY)]),
         updateDocument: vitest_1.vi.fn().mockImplementation((_collection, doc) => Promise.resolve(doc)),
-        listRoles: vitest_1.vi.fn().mockResolvedValue([
-            { _id: "r1", name: "Admin", type: "system", item: "system", permissions: [] },
-            { _id: "r2", name: "Game Editor", type: "gamification", item: "game1", permissions: [] },
-        ]),
+        listRoles: vitest_1.vi.fn().mockResolvedValue(roles),
+        listRolesStrict: vitest_1.vi.fn().mockResolvedValue(roles),
+        getRoleById: vitest_1.vi.fn().mockResolvedValue({ _id: "r1", name: "Admin", type: "system", item: "system", permissions: [] }),
         saveRole: vitest_1.vi.fn().mockImplementation((role) => Promise.resolve({ ...role, _id: role._id ?? "new-role" })),
         deleteRole: vitest_1.vi.fn().mockResolvedValue({ ok: 1 }),
-        listRoleAssignments: vitest_1.vi.fn().mockResolvedValue([{ type: "user", item: "u1", role: "r1" }]),
+        listRoleAssignments: vitest_1.vi.fn().mockResolvedValue(assignments),
+        listRoleAssignmentsStrict: vitest_1.vi.fn().mockResolvedValue(assignments),
         assignRole: vitest_1.vi.fn().mockImplementation((payload) => Promise.resolve(payload)),
         unassignRole: vitest_1.vi.fn().mockResolvedValue({ ok: 1 }),
         ...overrides,
     };
 }
-function makeInvoke(overrides = {}) {
+function makeInvoke(overrides = {}, connection = { serverUrl: "https://test.funifier.com" }) {
     const api = fakeApi(overrides);
-    const holder = { requireClient: () => api };
+    const holder = {
+        requireClient: () => api,
+        getConnectionInfo: () => ({
+            connected: true,
+            serverUrl: connection.serverUrl ?? null,
+            name: null,
+        }),
+    };
     let handler;
     const server = {
         registerTool: (_name, _config, h) => { handler = h; },
@@ -96,4 +132,224 @@ function makeInvoke(overrides = {}) {
         (0, vitest_1.expect)(result.content[0].text).toContain("Error in funifier_permissions");
     });
 });
+(0, vitest_1.describe)("funifier_permissions native pre-write backup (no LLM in the loop)", () => {
+    (0, vitest_1.it)("writes a snapshot of the prior security doc BEFORE the mutation fires", async () => {
+        // The mutation mock records how many snapshots exist at the moment it is invoked.
+        let snapshotsWhenMutated = -1;
+        const { invoke, api } = makeInvoke({
+            updateDocument: vitest_1.vi.fn().mockImplementation((_collection, doc) => {
+                snapshotsWhenMutated = (0, _backup_1.listSnapshots)(backupDir).length;
+                return Promise.resolve(doc);
+            }),
+        });
+        // A genuinely new app, so the mutated doc (2 apps) differs from the prior doc (1 app).
+        const result = await invoke({
+            action: "save_api_app",
+            data: JSON.stringify({ name: "New App", app_secret: "brand-new", scope: "read_all" }),
+        });
+        (0, vitest_1.expect)(result.isError).toBeUndefined();
+        (0, vitest_1.expect)(api.updateDocument).toHaveBeenCalled();
+        (0, vitest_1.expect)(snapshotsWhenMutated).toBe(1); // backup existed before updateDocument ran
+        const snap = readNewestSnapshot();
+        (0, vitest_1.expect)(snap.category).toBe("security");
+        (0, vitest_1.expect)(snap.existedBefore).toBe(true);
+        (0, vitest_1.expect)(snap.preImage).toEqual(SECURITY); // whole PRIOR doc, not the mutated 2-app version
+    });
+    (0, vitest_1.it)("aborts the mutation and returns isError when the backup write fails", async () => {
+        // Point the backup root at a path blocked by a file → mkdir for the category dir throws.
+        const blocker = path_1.default.join(backupDir, "blocker");
+        fs_1.default.writeFileSync(blocker, "not-a-directory");
+        process.env.FUNIFIER_BACKUP_ROOT = path_1.default.join(blocker, "nested");
+        const { invoke, api } = makeInvoke();
+        const result = await invoke({
+            action: "save_api_app",
+            data: JSON.stringify({ name: "Default", app_secret: "old-secret", scope: "read_all" }),
+        });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toContain("Backup write failed (mutation aborted)");
+        (0, vitest_1.expect)(api.updateDocument).not.toHaveBeenCalled(); // the literal "native, not LLM" guarantee
+    });
+    (0, vitest_1.it)("records existedBefore=false / preImage=null when creating a brand-new studio role", async () => {
+        const { invoke, api } = makeInvoke();
+        const role = {
+            name: "Brand New",
+            type: "gamification",
+            item: "game1",
+            permissions: [{ type: "page", object: "/x", operations: { read: true } }],
+        };
+        const result = await invoke({ action: "save_studio_role", data: JSON.stringify(role) });
+        (0, vitest_1.expect)(result.isError).toBeUndefined();
+        (0, vitest_1.expect)(api.saveRole).toHaveBeenCalledWith(role);
+        const snap = readNewestSnapshot(); // built by a real captureBackup, not a hand-faked fixture
+        (0, vitest_1.expect)(snap.category).toBe("studio-role");
+        (0, vitest_1.expect)(snap.existedBefore).toBe(false);
+        (0, vitest_1.expect)(snap.preImage).toBeNull();
+        (0, vitest_1.expect)(snap.naturalKey).toEqual({ name: "Brand New", type: "gamification", item: "game1" });
+    });
+    vitest_1.it.each([
+        ["save_api_app", { data: JSON.stringify({ name: "X", app_secret: "s", scope: "read_all" }) }],
+        ["delete_api_app", { app_secret: "old-secret" }],
+        ["save_security_role", { data: JSON.stringify({ name: "X", timeout: "1d", scope: "read_all" }) }],
+        ["delete_security_role", { name: "player" }],
+        ["save_studio_role", { data: JSON.stringify({ name: "X", type: "system", item: "system", permissions: [] }) }],
+        ["delete_studio_role", { role_id: "r1" }],
+        ["assign_studio_role", { principal_type: "user", principal_item: "u1", role_id: "r1" }],
+        ["unassign_studio_role", { principal_type: "user", principal_item: "u1", role_id: "r1" }],
+    ])("%s writes exactly one pre-write snapshot", async (action, args) => {
+        const { invoke } = makeInvoke();
+        const result = await invoke({ action, ...args });
+        (0, vitest_1.expect)(result.isError).toBeUndefined();
+        (0, vitest_1.expect)((0, _backup_1.listSnapshots)(backupDir).length).toBe(1);
+    });
+    (0, vitest_1.it)("restore_backup reapplies a security snapshot via updateDocument", async () => {
+        // 1. A real mutation captures the prior security doc.
+        const writer = makeInvoke();
+        await writer.invoke({
+            action: "save_api_app",
+            data: JSON.stringify({ name: "Default", app_secret: "old-secret", scope: "read_all" }),
+        });
+        (0, vitest_1.expect)((0, _backup_1.listSnapshots)(backupDir).length).toBe(1);
+        const backupPath = (0, _backup_1.listSnapshots)(backupDir)[0].path;
+        // 2. A fresh handler restores it — restore writes its own pre-write backup (BKP-11).
+        const { invoke, api } = makeInvoke();
+        const result = await invoke({ action: "restore_backup", backup_path: backupPath });
+        (0, vitest_1.expect)(result.isError).toBeUndefined();
+        (0, vitest_1.expect)(api.updateDocument).toHaveBeenCalledWith("security", vitest_1.expect.objectContaining({ _id: "game1" }));
+        (0, vitest_1.expect)((0, _backup_1.listSnapshots)(backupDir).length).toBe(2);
+    });
+    (0, vitest_1.it)("restore_backup rejects cross-server snapshots when serverUrl differs", async () => {
+        const writer = makeInvoke({}, { serverUrl: "https://tenant-a.funifier.com" });
+        await writer.invoke({
+            action: "save_api_app",
+            data: JSON.stringify({ name: "Default", app_secret: "old-secret", scope: "read_all" }),
+        });
+        const backupPath = (0, _backup_1.listSnapshots)(backupDir)[0].path;
+        const { invoke, api } = makeInvoke({}, { serverUrl: "https://tenant-b.funifier.com" });
+        const result = await invoke({ action: "restore_backup", backup_path: backupPath });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toMatch(/serverUrl mismatch/i);
+        (0, vitest_1.expect)(api.updateDocument).not.toHaveBeenCalled();
+    });
+    (0, vitest_1.it)("delete_studio_role aborts when getRoleById fails to read the role", async () => {
+        const { invoke, api } = makeInvoke({
+            getRoleById: vitest_1.vi.fn().mockResolvedValue(undefined),
+        });
+        const result = await invoke({ action: "delete_studio_role", role_id: "r1" });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toContain("not found or unreadable");
+        (0, vitest_1.expect)(api.deleteRole).not.toHaveBeenCalled();
+        (0, vitest_1.expect)((0, _backup_1.listSnapshots)(backupDir).length).toBe(0);
+    });
+    (0, vitest_1.it)("save_studio_role aborts when listRolesStrict fails (avoids false absent snapshot)", async () => {
+        const { invoke, api } = makeInvoke({
+            listRolesStrict: vitest_1.vi.fn().mockRejectedValue(new Error("network down")),
+        });
+        const result = await invoke({
+            action: "save_studio_role",
+            data: JSON.stringify({
+                name: "Editor",
+                type: "gamification",
+                item: "game1",
+                permissions: [{ type: "page", object: "/x", operations: { read: true } }],
+            }),
+        });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toContain("Failed to capture pre-image");
+        (0, vitest_1.expect)(api.saveRole).not.toHaveBeenCalled();
+        (0, vitest_1.expect)((0, _backup_1.listSnapshots)(backupDir).length).toBe(0);
+    });
+    (0, vitest_1.it)("assign_studio_role aborts when listRoleAssignmentsStrict fails (avoids false absent snapshot)", async () => {
+        const { invoke, api } = makeInvoke({
+            listRoleAssignmentsStrict: vitest_1.vi.fn().mockRejectedValue(new Error("network down")),
+        });
+        const result = await invoke({
+            action: "assign_studio_role",
+            principal_type: "user",
+            principal_item: "u1",
+            role_id: "r1",
+        });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toContain("Failed to capture pre-image");
+        (0, vitest_1.expect)(api.assignRole).not.toHaveBeenCalled();
+        (0, vitest_1.expect)((0, _backup_1.listSnapshots)(backupDir).length).toBe(0);
+    });
+    (0, vitest_1.it)("restore_backup of an absent studio role resolves the _id via natural key and deletes it", async () => {
+        // 1. Create-path snapshot from a real save of a role absent in listRoles → existedBefore=false.
+        const writer = makeInvoke();
+        await writer.invoke({
+            action: "save_studio_role",
+            data: JSON.stringify({
+                name: "Brand New",
+                type: "gamification",
+                item: "game1",
+                permissions: [{ type: "page", object: "/x", operations: { read: true } }],
+            }),
+        });
+        const backupPath = (0, _backup_1.listSnapshots)(backupDir)[0].path;
+        // 2. At restore time the role now exists with a server-assigned _id.
+        const { invoke, api } = makeInvoke({
+            listRoles: vitest_1.vi.fn().mockResolvedValue([
+                { _id: "created-id", name: "Brand New", type: "gamification", item: "game1", permissions: [] },
+            ]),
+        });
+        const result = await invoke({ action: "restore_backup", backup_path: backupPath });
+        (0, vitest_1.expect)(result.isError).toBeUndefined();
+        (0, vitest_1.expect)(api.deleteRole).toHaveBeenCalledWith("created-id");
+    });
+    (0, vitest_1.it)("restore_backup with a missing path errors and performs no remote write", async () => {
+        const { invoke, api } = makeInvoke();
+        const result = await invoke({ action: "restore_backup", backup_path: path_1.default.join(backupDir, "missing.json") });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(api.updateDocument).not.toHaveBeenCalled();
+        (0, vitest_1.expect)(api.deleteRole).not.toHaveBeenCalled();
+    });
+    (0, vitest_1.it)("restore_backup rejects path traversal outside the backup root", async () => {
+        const outside = path_1.default.join(backupDir, "..", "outside-backup.json");
+        fs_1.default.writeFileSync(outside, JSON.stringify({
+            version: 1,
+            action: "save_api_app",
+            category: "security",
+            resourceId: "game1",
+            existedBefore: true,
+            capturedAt: "2026-05-28T14:31:02.123Z",
+            serverUrl: null,
+            preImage: SECURITY,
+        }));
+        const { invoke, api } = makeInvoke();
+        const result = await invoke({ action: "restore_backup", backup_path: outside });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toMatch(/must be within/i);
+        (0, vitest_1.expect)(api.updateDocument).not.toHaveBeenCalled();
+        fs_1.default.rmSync(outside, { force: true });
+    });
+    (0, vitest_1.it)("restore_backup errors when a studio-role snapshot lacks naturalKey", async () => {
+        const badPath = path_1.default.join(backupDir, "studio-role", "missing-key.json");
+        fs_1.default.mkdirSync(path_1.default.dirname(badPath), { recursive: true });
+        fs_1.default.writeFileSync(badPath, JSON.stringify({
+            version: 1,
+            action: "save_studio_role",
+            category: "studio-role",
+            resourceId: "r1",
+            existedBefore: false,
+            capturedAt: "2026-05-28T14:31:02.123Z",
+            serverUrl: null,
+            preImage: null,
+        }));
+        const { invoke, api } = makeInvoke();
+        const result = await invoke({ action: "restore_backup", backup_path: badPath });
+        (0, vitest_1.expect)(result.isError).toBe(true);
+        (0, vitest_1.expect)(result.content[0].text).toContain("Studio-role snapshot missing naturalKey");
+        (0, vitest_1.expect)(api.saveRole).not.toHaveBeenCalled();
+        (0, vitest_1.expect)(api.deleteRole).not.toHaveBeenCalled();
+    });
+    (0, vitest_1.it)("list_backups returns captured snapshots newest-first", async () => {
+        const writer = makeInvoke();
+        await writer.invoke({ action: "delete_security_role", name: "player" });
+        const { invoke } = makeInvoke();
+        const result = await invoke({ action: "list_backups" });
+        (0, vitest_1.expect)(result.isError).toBeUndefined();
+        (0, vitest_1.expect)(result.content[0].text).toContain("Backups (1)");
+        (0, vitest_1.expect)(result.content[0].text).toContain("security");
+    });
+});
 //# sourceMappingURL=permissions.test.js.map