funifier-mcp 0.3.16 → 0.3.18

package/dist/mcp/tools/_scope-engine.js

@@ -0,0 +1,197 @@
+"use strict";
+/**
+ * Pure authorization engine mirroring SecurityFilter.doFilter from funifier-service.
+ * No I/O, no imports beyond types — fully unit-testable against a transcribed table.
+ *
+ * Source: SecurityFilter.java (funifier-service)
+ * Each rule carries a line reference so source drift can be detected via validate:skills claims.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANUAL_REVIEW_TOKENS = void 0;
+exports.entityFull = entityFull;
+exports.verbFor = verbFor;
+exports.isPublicPath = isPublicPath;
+exports.evaluateScope = evaluateScope;
+exports.usedTokens = usedTokens;
+/**
+ * Non-path-auditable tokens: their usage cannot be proven or disproven from a path manifest.
+ * These are always classified `manual-review`, never `excess`.
+ */
+exports.MANUAL_REVIEW_TOKENS = new Set([
+    "cross_domain",
+    "read_encrypted_field_values",
+    "read_encrypted_player_password",
+    "write_upload",
+]);
+// SecurityFilter.java:108-151: paths that bypass the scope check entirely.
+// GET /v3/widget, /v3/global, /v3/system/global require no scope.
+// NOTE: this list is hardcoded by mirroring SecurityFilter source; validate via sourceClaims.
+const PUBLIC_GET_PREFIXES = ["/v3/widget", "/v3/global", "/v3/system/global"];
+/** SecurityFilter.java:85-86: strip "/v3/", replace "/" → "_". */
+function entityFull(path) {
+    const clean = path.split("?")[0];
+    const withoutV3 = clean.startsWith("/v3/") ? clean.slice(4) : clean.replace(/^\//, "");
+    return withoutV3.replace(/\//g, "_");
+}
+/** SecurityFilter.java:226-227: GET→read, POST/PUT→write, else lowercase. */
+function verbFor(method) {
+    if (method === "GET")
+        return "read";
+    if (method === "POST" || method === "PUT")
+        return "write";
+    return method.toLowerCase();
+}
+/** SecurityFilter.java:108-151: true when the path requires no scope. */
+function isPublicPath(method, path) {
+    const clean = path.split("?")[0];
+    if (method === "GET") {
+        for (const prefix of PUBLIC_GET_PREFIXES) {
+            if (clean === prefix || clean.startsWith(prefix + "/"))
+                return true;
+        }
+    }
+    return false;
+}
+/** SecurityFilter.java:223-224: remove spaces, split on comma, drop empty tokens. */
+function normalizeScope(scope) {
+    return scope.replace(/ /g, "").split(",").filter(Boolean);
+}
+/**
+ * Evaluate whether `scope` authorizes `method` on `path`, reproducing the exact decision
+ * tree of SecurityFilter.doFilter.
+ */
+function evaluateScope(scope, method, path) {
+    const cleanPath = path.split("?")[0];
+    // SecurityFilter.java:108-151: public-path bypass
+    if (isPublicPath(method, cleanPath)) {
+        return { allowed: true, rule: "public-path", requiredTokens: [] };
+    }
+    const verb = verbFor(method);
+    const entity = entityFull(cleanPath);
+    const tokens = normalizeScope(scope);
+    const isDatabase = cleanPath === "/v3/database" || cleanPath.startsWith("/v3/database/");
+    // SecurityFilter.java:259-263: special POST exceptions (checked before grammar)
+    if (method === "POST") {
+        if (cleanPath === "/v3/action/log") {
+            if (tokens.includes("write_actionlog")) {
+                return {
+                    allowed: true,
+                    rule: "special-actionlog",
+                    matchedToken: "write_actionlog",
+                    requiredTokens: ["write_actionlog"],
+                };
+            }
+            // write_actionlog absent — falls through to grammar
+        }
+        if (cleanPath === "/v3/mobile/device") {
+            // Any non-empty scope passes (SecurityFilter.java:262-263)
+            if (tokens.length > 0) {
+                return { allowed: true, rule: "special-mobile-device", matchedToken: tokens[0], requiredTokens: [] };
+            }
+        }
+    }
+    // SecurityFilter.java:230-253: grammar allow rules — {verb}_all, exact, fallback m1, m2
+    let grammarAllowed = false;
+    let grammarRule = "denied";
+    let grammarToken;
+    let grammarRequired = [];
+    // 1. {verb}_all (SecurityFilter.java:230)
+    const verbAll = `${verb}_all`;
+    if (tokens.includes(verbAll)) {
+        grammarAllowed = true;
+        grammarRule = "all";
+        grammarToken = verbAll;
+        grammarRequired = [verbAll];
+    }
+    // 2. Exact: {verb}_{entity_full} (SecurityFilter.java:234)
+    if (!grammarAllowed) {
+        const exactToken = `${verb}_${entity}`;
+        if (tokens.includes(exactToken)) {
+            grammarAllowed = true;
+            grammarRule = "exact";
+            grammarToken = exactToken;
+            grammarRequired = [exactToken];
+        }
+    }
+    // 3. Fallback minus-1: {verb}_{prefix}_all (SecurityFilter.java:238-246, allow_full_m1)
+    if (!grammarAllowed) {
+        const segs = entity.split("_");
+        if (segs.length > 1) {
+            const m1Token = `${verb}_${segs.slice(0, -1).join("_")}_all`;
+            if (tokens.includes(m1Token)) {
+                grammarAllowed = true;
+                grammarRule = "fallback-m1";
+                grammarToken = m1Token;
+                grammarRequired = [m1Token];
+            }
+        }
+    }
+    // 4. Fallback minus-2: {verb}_{prefix}_all (SecurityFilter.java:247-253, allow_full_m2)
+    //    Code stops at m2 despite the "menos n" comment — confirmed at source.
+    if (!grammarAllowed) {
+        const segs = entity.split("_");
+        if (segs.length > 2) {
+            const m2Token = `${verb}_${segs.slice(0, -2).join("_")}_all`;
+            if (tokens.includes(m2Token)) {
+                grammarAllowed = true;
+                grammarRule = "fallback-m2";
+                grammarToken = m2Token;
+                grammarRequired = [m2Token];
+            }
+        }
+    }
+    // DatabaseRest.java: every /v3/database handler additionally requires the literal
+    // "database" scope token regardless of which grammar rule would otherwise allow it.
+    // Applies to ALL verbs including GET — verified at all 13 DatabaseRest check sites.
+    if (isDatabase) {
+        if (grammarAllowed && !tokens.includes("database")) {
+            return {
+                allowed: false,
+                rule: "database-keyword-missing",
+                matchedToken: grammarToken,
+                requiredTokens: [...grammarRequired, "database"],
+            };
+        }
+        if (grammarAllowed) {
+            return {
+                allowed: true,
+                rule: grammarRule,
+                matchedToken: grammarToken,
+                requiredTokens: [...grammarRequired, "database"],
+            };
+        }
+        // Grammar denied on a database path: suggest exact token + database keyword
+        return {
+            allowed: false,
+            rule: "denied",
+            requiredTokens: [`${verb}_${entity}`, "database"],
+        };
+    }
+    if (grammarAllowed) {
+        return { allowed: true, rule: grammarRule, matchedToken: grammarToken, requiredTokens: grammarRequired };
+    }
+    return { allowed: false, rule: "denied", requiredTokens: [`${verb}_${entity}`] };
+}
+/**
+ * Returns the subset of tokens in `scope` that actually authorized at least one entry
+ * in `entries`. Used for excess-token calculation in the audit diff.
+ */
+function usedTokens(scope, entries) {
+    const tokens = normalizeScope(scope);
+    const used = new Set();
+    for (const entry of entries) {
+        const decision = evaluateScope(scope, entry.method, entry.path);
+        if (decision.allowed) {
+            if (decision.matchedToken)
+                used.add(decision.matchedToken);
+            // "database" is a co-required token for /v3/database paths — mark it used too
+            const cleanPath = entry.path.split("?")[0];
+            if ((cleanPath === "/v3/database" || cleanPath.startsWith("/v3/database/")) &&
+                tokens.includes("database")) {
+                used.add("database");
+            }
+        }
+    }
+    return used;
+}
+//# sourceMappingURL=_scope-engine.js.map

package/dist/mcp/tools/_scope-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.js","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAsCH,gCAIC;AAGD,0BAIC;AAGD,oCAQC;AAWD,sCA0HC;AAMD,gCAuBC;AAzMD;;;GAGG;AACU,QAAA,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,cAAc;IACd,6BAA6B;IAC7B,gCAAgC;IAChC,cAAc;CACf,CAAC,CAAC;AAEH,2EAA2E;AAC3E,kEAAkE;AAClE,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;AAE9E,kEAAkE;AAClE,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,6EAA6E;AAC7E,SAAgB,OAAO,CAAC,MAAkB;IACxC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IAC1D,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,yEAAyE;AACzE,SAAgB,YAAY,CAAC,MAAkB,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;YACzC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAa,EAAE,MAAkB,EAAE,IAAY;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAErC,kDAAkD;IAClD,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEzF,gFAAgF;IAChF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACvC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,mBAAmB;oBACzB,YAAY,EAAE,iBAAiB;oBAC/B,cAAc,EAAE,CAAC,iBAAiB,CAAC;iBACpC,CAAC;YACJ,CAAC;YACD,oDAAoD;QACtD,CAAC;QACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YACtC,2DAA2D;YAC3D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAA0B,QAAQ,CAAC;IAClD,IAAI,YAAgC,CAAC;IACrC,IAAI,eAAe,GAAa,EAAE,CAAC;IAEnC,0CAA0C;IAC1C,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,cAAc,GAAG,IAAI,CAAC;QACtB,WAAW,GAAG,KAAK,CAAC;QACpB,YAAY,GAAG,OAAO,CAAC;QACvB,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,cAAc,GAAG,IAAI,CAAC;YACtB,WAAW,GAAG,OAAO,CAAC;YACtB,YAAY,GAAG,UAAU,CAAC;YAC1B,eAAe,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;gBACtB,WAAW,GAAG,aAAa,CAAC;gBAC5B,YAAY,GAAG,OAAO,CAAC;gBACvB,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,2EAA2E;IAC3E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;gBACtB,WAAW,GAAG,aAAa,CAAC;gBAC5B,YAAY,GAAG,OAAO,CAAC;gBACvB,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,oFAAoF;IACpF,oFAAoF;IACpF,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,0BAA0B;gBAChC,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,WAAW;gBACjB,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,QAAQ;YACd,cAAc,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,EAAE,UAAU,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;IAC3G,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CACxB,KAAa,EACb,OAA4D;IAE5D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC,YAAY;gBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC3D,8EAA8E;YAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IACE,CAAC,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;gBACvE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC3B,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/mcp/tools/_scope-engine.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=_scope-engine.test.d.ts.map

package/dist/mcp/tools/_scope-engine.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.test.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.test.ts"],"names":[],"mappings":""}

package/dist/mcp/tools/_scope-engine.test.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const _scope_engine_1 = require("./_scope-engine");
+// ─── entityFull ───────────────────────────────────────────────────────────────
+(0, vitest_1.describe)("entityFull", () => {
+    (0, vitest_1.it)("strips /v3/ and replaces / with _", () => {
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/database/mycoll/aggregate")).toBe("database_mycoll_aggregate");
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/action/log")).toBe("action_log");
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/game")).toBe("game");
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/game/level/experience")).toBe("game_level_experience");
+    });
+    (0, vitest_1.it)("strips query string before processing", () => {
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/action/log?limit=10")).toBe("action_log");
+    });
+});
+// ─── verbFor ─────────────────────────────────────────────────────────────────
+(0, vitest_1.describe)("verbFor (SecurityFilter.java:226-227)", () => {
+    (0, vitest_1.it)("maps GET → read", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("GET")).toBe("read"));
+    (0, vitest_1.it)("maps POST → write", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("POST")).toBe("write"));
+    (0, vitest_1.it)("maps PUT → write", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("PUT")).toBe("write"));
+    (0, vitest_1.it)("maps DELETE → delete", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("DELETE")).toBe("delete"));
+    (0, vitest_1.it)("lowercases other methods", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("PATCH")).toBe("patch"));
+});
+// ─── isPublicPath ─────────────────────────────────────────────────────────────
+(0, vitest_1.describe)("isPublicPath (SecurityFilter.java:108-151)", () => {
+    (0, vitest_1.it)("GET /v3/widget is public", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/widget")).toBe(true));
+    (0, vitest_1.it)("GET /v3/widget/my-widget is public (prefix match)", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/widget/my-widget")).toBe(true));
+    (0, vitest_1.it)("GET /v3/global is public", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/global")).toBe(true));
+    (0, vitest_1.it)("GET /v3/system/global is public", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/system/global")).toBe(true));
+    (0, vitest_1.it)("POST /v3/widget is NOT public (method mismatch)", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("POST", "/v3/widget")).toBe(false));
+    (0, vitest_1.it)("GET /v3/game is not a public path", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/game")).toBe(false));
+});
+// ─── evaluateScope — grammar rules ───────────────────────────────────────────
+(0, vitest_1.describe)("evaluateScope — public-path bypass", () => {
+    (0, vitest_1.it)("allows GET /v3/widget regardless of scope", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("", "GET", "/v3/widget");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("public-path");
+    });
+    (0, vitest_1.it)("allows GET /v3/global regardless of scope", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("", "GET", "/v3/global");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("public-path");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — _all rule (SecurityFilter.java:230)", () => {
+    (0, vitest_1.it)("read_all allows GET on any non-database path", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "GET", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("all");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_all");
+    });
+    (0, vitest_1.it)("write_all allows POST on any non-database path", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_all", "POST", "/v3/action/log");
+        // /v3/action/log POST: write_actionlog fires first — but write_all doesn't include write_actionlog, so grammar fires
+        // Actually write_all should be checked in grammar, but /v3/action/log is a special POST:
+        // write_actionlog is checked first; if not present, grammar runs. write_all would match grammar.
+        // BUT wait: the special-actionlog check only fires when write_actionlog IS present.
+        // So with scope=write_all, grammar check runs: write_all → allowed via "all" rule.
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("all");
+    });
+    (0, vitest_1.it)("delete_all allows DELETE on any non-database path", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("delete_all", "DELETE", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("all");
+        (0, vitest_1.expect)(d.matchedToken).toBe("delete_all");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — exact match (SecurityFilter.java:234)", () => {
+    (0, vitest_1.it)("read_action_log allows GET /v3/action/log", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_action_log", "GET", "/v3/action/log");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("exact");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_action_log");
+    });
+    (0, vitest_1.it)("write_game_level allows POST /v3/game/level", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_game_level", "POST", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("exact");
+    });
+    (0, vitest_1.it)("denies when the exact token is absent", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game", "GET", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+    });
+});
+(0, vitest_1.describe)("evaluateScope — fallback minus-1 (allow_full_m1, SecurityFilter.java:238-246)", () => {
+    (0, vitest_1.it)("read_game_all allows GET /v3/game/level (entity=game_level, m1=game_all)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game_all", "GET", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("fallback-m1");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_game_all");
+    });
+    (0, vitest_1.it)("read_game_level_all allows GET /v3/game/level/experience (m1=game_level_all)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game_level_all", "GET", "/v3/game/level/experience");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("fallback-m1");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — fallback minus-2 (allow_full_m2, SecurityFilter.java:247-253)", () => {
+    (0, vitest_1.it)("read_game_all allows GET /v3/game/level/experience (entity=game_level_experience, m2=game_all)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game_all", "GET", "/v3/game/level/experience");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("fallback-m2");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_game_all");
+    });
+    (0, vitest_1.it)("read_database_all does NOT authorize GET /v3/database/coll/find without database keyword (m2 denied first by db-keyword)", () => {
+        // read_database_all would be m1 for database_coll_find (entity has 3 segments)
+        // But /v3/database path requires "database" keyword regardless of grammar
+        const d = (0, _scope_engine_1.evaluateScope)("read_database_all", "GET", "/v3/database/coll/find");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("database-keyword-missing");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — beyond minus-2 denied", () => {
+    (0, vitest_1.it)("read_a_all does NOT authorize GET /v3/a/b/c/d (entity=a_b_c_d, m2=a_b, no token)", () => {
+        // m1 would be read_a_b_c_all, m2 would be read_a_b_all — neither in scope
+        const d = (0, _scope_engine_1.evaluateScope)("read_a_all", "GET", "/v3/a/b/c/d");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("denied");
+    });
+});
+// ─── evaluateScope — special POST exceptions (SecurityFilter.java:259-263) ───
+(0, vitest_1.describe)("evaluateScope — special POST exceptions", () => {
+    (0, vitest_1.it)("POST /v3/action/log with write_actionlog → special-actionlog (PSEC-06)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_actionlog", "POST", "/v3/action/log");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("special-actionlog");
+        (0, vitest_1.expect)(d.matchedToken).toBe("write_actionlog");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("write_actionlog");
+    });
+    (0, vitest_1.it)("POST /v3/action/log without write_actionlog falls through to grammar (denied if no other token)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "POST", "/v3/action/log");
+        // grammar: write_all not present, exact write_action_log not present... read_all is for GET.
+        // Actually: verb for POST is "write". write_all not in scope. exact write_action_log not in scope.
+        // Falls through → denied (read_all doesn't authorize write)
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+    });
+    (0, vitest_1.it)("POST /v3/mobile/device with any non-empty scope → special-mobile-device", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "POST", "/v3/mobile/device");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("special-mobile-device");
+    });
+    (0, vitest_1.it)("POST /v3/mobile/device with empty scope → denied (falls through to grammar)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("", "POST", "/v3/mobile/device");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+    });
+});
+// ─── evaluateScope — scope normalization (SecurityFilter.java:223-224) ────────
+(0, vitest_1.describe)("evaluateScope — scope normalization", () => {
+    (0, vitest_1.it)("removes spaces before splitting (space-separated scope string)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all, write_all", "GET", "/v3/game");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_all");
+    });
+    (0, vitest_1.it)("handles duplicate tokens without false denials", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game,read_game,read_all", "GET", "/v3/game");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+    });
+});
+// ─── T6: database keyword rule (DatabaseRest.java, all 13 handler sites) ─────
+(0, vitest_1.describe)("evaluateScope — database keyword (PSEC-07)", () => {
+    (0, vitest_1.it)("GET /v3/database/coll with read_all but without database keyword → database-keyword-missing", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "GET", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("database-keyword-missing");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("database");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("read_all");
+    });
+    (0, vitest_1.it)("GET /v3/database/coll with read_all AND database keyword → allowed", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all,database", "GET", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.requiredTokens).toContain("database");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("read_all");
+    });
+    (0, vitest_1.it)("POST /v3/database/coll with write_all but without database → database-keyword-missing", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_all", "POST", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("database-keyword-missing");
+    });
+    (0, vitest_1.it)("POST /v3/database/coll with write_all AND database → allowed", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_all,database", "POST", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+    });
+    (0, vitest_1.it)("DELETE /v3/database/coll with delete_all AND database → allowed", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("delete_all,database", "DELETE", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+    });
+    (0, vitest_1.it)("GET /v3/database/coll/aggregate denied when grammar itself denies (suggests entity token + database)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("database", "GET", "/v3/database/coll/aggregate");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("denied");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("database");
+    });
+    (0, vitest_1.it)("non-database path is unaffected by database keyword presence/absence", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "GET", "/v3/game");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).not.toBe("database-keyword-missing");
+    });
+});
+// ─── T6: usedTokens ──────────────────────────────────────────────────────────
+(0, vitest_1.describe)("usedTokens", () => {
+    (0, vitest_1.it)("returns empty set when no entries match", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all", [{ method: "POST", path: "/v3/game" }]);
+        // POST needs write_* not read_*
+        (0, vitest_1.expect)(used.size).toBe(0);
+    });
+    (0, vitest_1.it)("attributes read_all when it authorizes a GET entry", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,write_all", [{ method: "GET", path: "/v3/game/level" }]);
+        (0, vitest_1.expect)(used.has("read_all")).toBe(true);
+        (0, vitest_1.expect)(used.has("write_all")).toBe(false);
+    });
+    (0, vitest_1.it)("attributes both grammar token and 'database' for /v3/database entries", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,database", [{ method: "GET", path: "/v3/database/coll" }]);
+        (0, vitest_1.expect)(used.has("read_all")).toBe(true);
+        (0, vitest_1.expect)(used.has("database")).toBe(true);
+    });
+    (0, vitest_1.it)("does not attribute database when path is not /v3/database", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,database", [{ method: "GET", path: "/v3/game" }]);
+        (0, vitest_1.expect)(used.has("database")).toBe(false);
+    });
+    (0, vitest_1.it)("handles multiple entries across different tokens", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,write_game,database", [
+            { method: "GET", path: "/v3/game" },
+            { method: "POST", path: "/v3/game" },
+        ]);
+        (0, vitest_1.expect)(used.has("read_all")).toBe(true);
+        (0, vitest_1.expect)(used.has("write_game")).toBe(true);
+    });
+});
+// ─── MANUAL_REVIEW_TOKENS ─────────────────────────────────────────────────────
+(0, vitest_1.describe)("MANUAL_REVIEW_TOKENS", () => {
+    (0, vitest_1.it)("includes cross_domain, read_encrypted_field_values, read_encrypted_player_password, write_upload", () => {
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("cross_domain")).toBe(true);
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("read_encrypted_field_values")).toBe(true);
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("read_encrypted_player_password")).toBe(true);
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("write_upload")).toBe(true);
+    });
+});
+//# sourceMappingURL=_scope-engine.test.js.map

package/dist/mcp/tools/_scope-engine.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.test.js","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,mDAOyB;AAEzB,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtF,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAA,WAAE,EAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,IAAA,WAAE,EAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,IAAA,WAAE,EAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9H,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,IAAA,WAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpH,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC/D,qHAAqH;QACrH,yFAAyF;QACzF,iGAAiG;QACjG,oFAAoF;QACpF,mFAAmF;QACnF,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,WAAW,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+EAA+E,EAAE,GAAG,EAAE;IAC7F,IAAA,WAAE,EAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,qBAAqB,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;QACnF,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+EAA+E,EAAE,GAAG,EAAE;IAC7F,IAAA,WAAE,EAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,eAAe,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0HAA0H,EAAE,GAAG,EAAE;QAClI,+EAA+E;QAC/E,0EAA0E;QAC1E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAA,WAAE,EAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,0EAA0E;QAC1E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAA,WAAE,EAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACrE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9D,6FAA6F;QAC7F,mGAAmG;QACnG,4DAA4D;QAC5D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAA,WAAE,EAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,qBAAqB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,8BAA8B,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAA,WAAE,EAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAChE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACzE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,qBAAqB,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sGAAsG,EAAE,GAAG,EAAE;QAC9G,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC;QAC1E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5E,gCAAgC;QAChC,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,oBAAoB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3F,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,mBAAmB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAC7F,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,mBAAmB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACpF,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,8BAA8B,EAAE;YACtD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACnC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;SACrC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAA,WAAE,EAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp/tools/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AA8V1C,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,QAsP9E"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAmW1C,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,QAkT9E"}

package/dist/mcp/tools/permissions.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerPermissionsTool = registerPermissionsTool;
 const zod_1 = require("zod");
 const _backup_1 = require("./_backup");
+const _audit_1 = require("./_audit");
 function parseJsonObject(value, label) {
     if (!value) {
         throw new Error(`'${label}' is required as a JSON object.`);
@@ -274,7 +275,8 @@ function registerPermissionsTool(server, apiHolder) {
             "Studio/UI permissions are stored in system roles (role collection) and assignments (principal_role). " +
             "Use API actions for app_secret/scope/whitelist management, and Studio actions for page/api/limit permissions and role assignments. " +
             "Every mutating action writes a complete pre-image snapshot under .funifier/backups/ (or FUNIFIER_BACKUP_ROOT) BEFORE the remote write; " +
-            "use list_backups to see them and restore_backup (with backup_path) to roll a change back. " +
+            "use list_backups to see them, restore_backup (with backup_path) to roll a change back, and verify_backup (with backup_path) to check any snapshot is restorable without side effects. " +
+            "Use audit (with a JSON manifest in 'data') to cross-check your project's Funifier API calls against the live security document — returns missing scopes, excess tokens, and static danger findings without any mutation or snapshot. " +
             "Snapshots accumulate without automatic retention — prune .funifier/backups/ manually when needed.",
         inputSchema: {
             action: zod_1.z
@@ -293,6 +295,8 @@ function registerPermissionsTool(server, apiHolder) {
                 "unassign_studio_role",
                 "list_backups",
                 "restore_backup",
+                "verify_backup",
+                "audit",
             ])
                 .describe("Permission operation to execute."),
             data: zod_1.z
@@ -301,7 +305,8 @@ function registerPermissionsTool(server, apiHolder) {
                 .describe("JSON object payload. For save_api_app: {name, app_secret, scope, whitelist?}. " +
                 "For save_security_role: {name, timeout, scope, whitelist?}. " +
                 "For save_studio_role: {_id?, name, type, item, permissions:[{type, object, operations}], gamification_whitelist?, gamification_blacklist?}. " +
-                "For assign/unassign_studio_role: {type:'user|account|gamification', item:'<principal id>', role:'<role id>'}."),
+                "For assign/unassign_studio_role: {type:'user|account|gamification', item:'<principal id>', role:'<role id>'}. " +
+                "For audit: {version:1, entries:[{method, path, auth, evidence, confidence?}]} where auth is 'public'|'player'|'role:<name>'|'app:<name>'."),
             app_secret: zod_1.z.string().optional().describe("Application secret used by delete_api_app."),
             name: zod_1.z.string().optional().describe("Security role name used by delete_security_role."),
             role_id: zod_1.z.string().optional().describe("Studio role _id used by delete_studio_role or assignment helpers."),
@@ -325,6 +330,38 @@ function registerPermissionsTool(server, apiHolder) {
         },
     }, async ({ action, data, app_secret, name, role_id, role_type, item, principal_type, principal_item, backup_path }) => {
         try {
+            // verify_backup works without a connection — handle before requireClient()
+            if (action === "verify_backup") {
+                if (!backup_path)
+                    throw new Error("'backup_path' is required for verify_backup.");
+                const resolvedPath = (0, _backup_1.resolveBackupPath)(backup_path);
+                const checks = [];
+                const readResult = (0, _backup_1.safeReadSnapshot)(resolvedPath);
+                if (!readResult.ok) {
+                    checks.push({ check: readResult.check, ok: false, detail: readResult.detail });
+                    return formatResult(`verify_backup: FAIL — ${backup_path}`, { verdict: "FAIL", backup_path, checks });
+                }
+                checks.push({ check: "file-readable", ok: true });
+                checks.push({ check: "snapshot-schema", ok: true });
+                const vbSnapshot = readResult.snapshot;
+                checks.push(...(0, _backup_1.validateSnapshotRestorable)(vbSnapshot));
+                // Server-match check: non-throwing wrap, skipped when disconnected (PSEC-05)
+                const connInfo = apiHolder.getConnectionInfo();
+                if (connInfo.connected) {
+                    try {
+                        assertSnapshotServerMatches(vbSnapshot, connInfo.serverUrl);
+                        checks.push({ check: "server-url-match", ok: true });
+                    }
+                    catch (err) {
+                        checks.push({ check: "server-url-match", ok: false, detail: err.message });
+                    }
+                }
+                else {
+                    checks.push({ check: "server-url-match", ok: true, detail: "Skipped — not connected to any server." });
+                }
+                const verdict = checks.every((c) => c.ok) ? "PASS" : "FAIL";
+                return formatResult(`verify_backup: ${verdict} — ${backup_path}`, { verdict, backup_path, checks });
+            }
             const api = apiHolder.requireClient();
             const serverUrl = apiHolder.getConnectionInfo?.().serverUrl ?? null;
             if (action === "list_api_apps") {
@@ -428,20 +465,40 @@ function registerPermissionsTool(server, apiHolder) {
                 const snapshots = (0, _backup_1.listSnapshots)();
                 return formatResult(`Backups (${snapshots.length})`, snapshots);
             }
+            if (action === "audit") {
+                if (!data)
+                    throw new Error("'data' is required for audit — provide a JSON manifest with version:1 and entries.");
+                let rawManifest;
+                try {
+                    rawManifest = JSON.parse(data);
+                }
+                catch {
+                    throw new Error("'data' is not valid JSON.");
+                }
+                const parseResult = _audit_1.auditManifestSchema.safeParse(rawManifest);
+                if (!parseResult.success) {
+                    const first = parseResult.error.issues[0];
+                    const entryIdx = typeof first.path[1] === "number" ? ` (entry ${first.path[1]})` : "";
+                    throw new Error(`Manifest validation failed${entryIdx}: ${first.message}`);
+                }
+                const manifest = parseResult.data;
+                // Load security document read-only — abort loudly on any failure (never partial verdict)
+                const securityDoc = await loadSecurityDocument(api);
+                // Mask app_secret values before passing to the audit engine
+                const maskedDoc = {
+                    ...securityDoc,
+                    apps: maskSecurityApplications(securityDoc.apps),
+                };
+                const report = (0, _audit_1.runAudit)(manifest, maskedDoc);
+                return formatResult("audit", report);
+            }
             if (action === "restore_backup") {
                 if (!backup_path)
                     throw new Error("'backup_path' is required for restore_backup.");
                 // Read + validate first: a missing/corrupt/invalid file throws before any remote write.
                 const snapshot = (0, _backup_1.readSnapshot)((0, _backup_1.resolveBackupPath)(backup_path));
-                // Critical #2: validate security snapshot schema before any side effects.
-                // A snapshot without apps/roles would re-truncate the document on write.
-                if (snapshot.category === "security") {
-                    const pre = snapshot.preImage;
-                    if (!pre || pre._id == null || !Array.isArray(pre.apps) || !Array.isArray(pre.roles)) {
-                        throw new Error("Security snapshot pre-image is malformed: missing '_id', or 'apps'/'roles' are not arrays. " +
-                            "Refusing to apply a snapshot that could truncate the document.");
-                    }
-                }
+                // Shared validator: same checks as capture-time dry-run — single source of truth (PSEC-04).
+                (0, _backup_1.assertSnapshotRestorable)(snapshot);
                 assertSnapshotServerMatches(snapshot, serverUrl);
                 // Restore is itself a critical mutation, so it takes its own pre-write backup of current state.
                 // Critical #1: skipContentCheck — the live document may already be truncated (that is why we restore).