funifier-mcp 0.3.17 → 0.3.19

package/dist/mcp/tools/_fetch-current.d.ts

@@ -1,3 +1,4 @@
-export type ResourceType = "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder" | "folder-content" | "folder-content-type" | "folder-log";
+import { ResourceType } from "./_registry";
+export type { ResourceType };
 export declare function fetchCurrentById(api: any, type: ResourceType, id: string): Promise<any | null>;
 //# sourceMappingURL=_fetch-current.d.ts.map

package/dist/mcp/tools/_fetch-current.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_fetch-current.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_fetch-current.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,WAAW,GACX,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,GACb,iBAAiB,GACjB,qBAAqB,GACrB,aAAa,GACb,cAAc,GACd,OAAO,GACP,QAAQ,GACR,WAAW,GACX,OAAO,GACP,OAAO,GACP,aAAa,GACb,MAAM,GACN,sBAAsB,GACtB,mBAAmB,GACnB,QAAQ,GACR,gBAAgB,GAChB,qBAAqB,GACrB,YAAY,CAAC;AAEjB,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,YAAY,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CA6ErB"}
+{"version":3,"file":"_fetch-current.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_fetch-current.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,YAAY,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAIrB"}

package/dist/mcp/tools/_fetch-current.js

@@ -1,81 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.fetchCurrentById = fetchCurrentById;
+const _registry_1 = require("./_registry");
 async function fetchCurrentById(api, type, id) {
-    let items;
-    switch (type) {
-        case "trigger":
-            items = await api.listTriggers();
-            break;
-        case "scheduler":
-            items = await api.listSchedulers();
-            break;
-        case "aggregate":
-            items = await api.listAggregates();
-            break;
-        case "websocket":
-            items = await api.listWebsockets();
-            break;
-        case "widget":
-            items = await api.listWidgets();
-            break;
-        case "custom-page":
-            items = await api.listCustomPages();
-            break;
-        case "public-endpoint":
-            items = await api.listPublicEndpoints();
-            break;
-        case "challenge-aggregate":
-            items = await api.listChallengeAggregates();
-            break;
-        case "auth-module":
-            items = await api.listAuthModules();
-            break;
-        case "ai-knowledge":
-            items = await api.listAiKnowledge();
-            break;
-        case "audit":
-            items = await api.listAudits();
-            break;
-        case "action":
-            items = await api.listActions();
-            break;
-        case "challenge":
-            items = await api.listChallenges();
-            break;
-        case "point":
-            items = await api.listPoints();
-            break;
-        case "level":
-            items = await api.listLevels();
-            break;
-        case "leaderboard":
-            items = await api.listLeaderboards();
-            break;
-        case "quiz":
-            items = await api.listQuizzes();
-            break;
-        case "virtual-good-catalog":
-            items = await api.listVirtualGoodCatalogs();
-            break;
-        case "virtual-good-item":
-            items = await api.listVirtualGoodItems();
-            break;
-        case "folder":
-            items = await api.listFolders();
-            break;
-        case "folder-content":
-            items = await api.listFolderContents();
-            break;
-        case "folder-content-type":
-            items = await api.listFolderContentTypes();
-            break;
-        case "folder-log":
-            items = await api.listFolderLogs();
-            break;
-        default:
-            throw new Error(`Unknown resource type: ${type}`);
-    }
+    const items = await (0, _registry_1.listResource)(api, type);
     const found = items.find((i) => i._id === id);
     return found ?? null;
 }

package/dist/mcp/tools/_fetch-current.js.map

@@ -1 +1 @@
-{"version":3,"file":"_fetch-current.js","sourceRoot":"","sources":["../../../src/mcp/tools/_fetch-current.ts"],"names":[],"mappings":";;AAyBA,4CAiFC;AAjFM,KAAK,UAAU,gBAAgB,CACpC,GAAQ,EACR,IAAkB,EAClB,EAAU;IAEV,IAAI,KAAY,CAAC;IACjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,KAAK,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM;QACR,KAAK,WAAW;YACd,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,WAAW;YACd,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,WAAW;YACd,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,QAAQ;YACX,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM;QACR,KAAK,aAAa;YAChB,KAAK,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;YACpC,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,GAAG,MAAM,GAAG,CAAC,mBAAmB,EAAE,CAAC;YACxC,MAAM;QACR,KAAK,qBAAqB;YACxB,KAAK,GAAG,MAAM,GAAG,CAAC,uBAAuB,EAAE,CAAC;YAC5C,MAAM;QACR,KAAK,aAAa;YAChB,KAAK,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;YACpC,MAAM;QACR,KAAK,cAAc;YACjB,KAAK,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;YACpC,MAAM;QACR,KAAK,OAAO;YACV,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM;QACR,KAAK,QAAQ;YACX,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM;QACR,KAAK,WAAW;YACd,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM;QACR,KAAK,OAAO;YACV,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM;QACR,KAAK,OAAO;YACV,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM;QACR,KAAK,aAAa;YAChB,KAAK,GAAG,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM;QACR,KAAK,MAAM;YACT,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM;QACR,KAAK,sBAAsB;YACzB,KAAK,GAAG,MAAM,GAAG,CAAC,uBAAuB,EAAE,CAAC;YAC5C,MAAM;QACR,KAAK,mBAAmB;YACtB,KAAK,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACzC,MAAM;QACR,KAAK,QAAQ;YACX,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM;QACR,KAAK,gBAAgB;YACnB,KAAK,GAAG,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACvC,MAAM;QACR,KAAK,qBAAqB;YACxB,KAAK,GAAG,MAAM,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAC3C,MAAM;QACR,KAAK,YAAY;YACf,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC"}
+{"version":3,"file":"_fetch-current.js","sourceRoot":"","sources":["../../../src/mcp/tools/_fetch-current.ts"],"names":[],"mappings":";;AAIA,4CAQC;AAZD,2CAAyD;AAIlD,KAAK,UAAU,gBAAgB,CACpC,GAAQ,EACR,IAAkB,EAClB,EAAU;IAEV,MAAM,KAAK,GAAG,MAAM,IAAA,wBAAY,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC"}

package/dist/mcp/tools/_registry.d.ts

@@ -0,0 +1,183 @@
+export interface ResourceDef {
+    /** api-client method that lists all items of this type (always present). */
+    list: string;
+    /** Exposed in the funifier_list and funifier_get type enums. */
+    publicList: boolean;
+    /** api-client save method — present ⇒ exposed in funifier_save and merge-on-update. */
+    save?: string;
+    /** Save methods that take a second `isNew` boolean argument. */
+    saveIsNewArg?: boolean;
+    /** api-client delete method — present ⇒ exposed in funifier_delete. */
+    delete?: string;
+    /** Server-side script is Groovy (vs JS) — drives the get/save companion file extension. */
+    groovy?: boolean;
+}
+declare const RAW_REGISTRY: {
+    trigger: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+        groovy: true;
+    };
+    scheduler: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+        groovy: true;
+    };
+    aggregate: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+        groovy: true;
+    };
+    websocket: {
+        list: string;
+        publicList: true;
+        save: string;
+        saveIsNewArg: true;
+        delete: string;
+        groovy: true;
+    };
+    widget: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    "custom-page": {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    "public-endpoint": {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+        groovy: true;
+    };
+    "challenge-aggregate": {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    "auth-module": {
+        list: string;
+        publicList: true;
+        save: string;
+        saveIsNewArg: true;
+        delete: string;
+        groovy: true;
+    };
+    "ai-knowledge": {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    audit: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    action: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    challenge: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    point: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    level: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    leaderboard: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    quiz: {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    "virtual-good-catalog": {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    "virtual-good-item": {
+        list: string;
+        publicList: true;
+        save: string;
+        delete: string;
+    };
+    folder: {
+        list: string;
+        publicList: false;
+        save: string;
+        delete: string;
+    };
+    "folder-content": {
+        list: string;
+        publicList: false;
+        save: string;
+        delete: string;
+    };
+    "folder-content-type": {
+        list: string;
+        publicList: false;
+        save: string;
+    };
+    "folder-log": {
+        list: string;
+        publicList: false;
+        save: string;
+        delete: string;
+    };
+    role: {
+        list: string;
+        publicList: true;
+    };
+};
+export type ResourceType = keyof typeof RAW_REGISTRY;
+export declare const RESOURCE_REGISTRY: Record<ResourceType, ResourceDef>;
+/** Types exposed in funifier_list and funifier_get (insertion order preserved). */
+export declare const PUBLIC_LIST_TYPES: ["folder" | "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder-content" | "folder-content-type" | "folder-log" | "role", ...("folder" | "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder-content" | "folder-content-type" | "folder-log" | "role")[]];
+/** Types exposed in funifier_save. */
+export declare const SAVE_TYPES: ["folder" | "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder-content" | "folder-content-type" | "folder-log" | "role", ...("folder" | "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder-content" | "folder-content-type" | "folder-log" | "role")[]];
+/** Types exposed in funifier_delete. */
+export declare const DELETE_TYPES: ["folder" | "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder-content" | "folder-content-type" | "folder-log" | "role", ...("folder" | "trigger" | "scheduler" | "aggregate" | "websocket" | "widget" | "custom-page" | "public-endpoint" | "challenge-aggregate" | "auth-module" | "ai-knowledge" | "audit" | "action" | "challenge" | "point" | "level" | "leaderboard" | "quiz" | "virtual-good-catalog" | "virtual-good-item" | "folder-content" | "folder-content-type" | "folder-log" | "role")[]];
+/** Server-side script for this type is Groovy (vs plain JS). */
+export declare function isGroovyType(type: string): boolean;
+/** List every item of a resource type via its registered api-client method. */
+export declare function listResource(api: any, type: ResourceType): Promise<any[]>;
+/** Save a resource via its registered method, threading the `isNew` arg when required. */
+export declare function saveResource(api: any, type: ResourceType, data: any): Promise<any>;
+/** Delete a resource by id via its registered method. */
+export declare function deleteResource(api: any, type: ResourceType, id: string): Promise<any>;
+export {};
+//# sourceMappingURL=_registry.d.ts.map

package/dist/mcp/tools/_registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_registry.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_registry.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,UAAU,EAAE,OAAO,CAAC;IACpB,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBqB,CAAC;AAExC,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,YAAY,CAAC;AAIrD,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAgB,CAAC;AASjF,mFAAmF;AACnF,eAAO,MAAM,iBAAiB,6tBAAkC,CAAC;AACjE,sCAAsC;AACtC,eAAO,MAAM,UAAU,6tBAA8B,CAAC;AACtD,wCAAwC;AACxC,eAAO,MAAM,YAAY,6tBAAgC,CAAC;AAE1D,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAQD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAEzE;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAIlF;AAED,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAIrF"}

package/dist/mcp/tools/_registry.js

@@ -0,0 +1,88 @@
+"use strict";
+// Single source of truth mapping each Funifier resource type to its api-client
+// methods and which tools expose it. Replaces the parallel switch/dispatch blocks
+// that previously lived (and silently diverged) in save/delete/get/list and
+// _fetch-current. Adding a resource type is now one entry here + (when needed) a
+// summarize case in list.ts — see the consistency test in _registry.test.ts.
+//
+// Capability presence is EXPLICIT, not inferred from method existence, because the
+// public tools intentionally diverge from internal use:
+//   - folders have list methods (used by save's merge-on-update) but are NOT
+//     exposed in the funifier_list / funifier_get enums (publicList: false);
+//   - role is read-only here (no save/delete) — mutations go through funifier_permissions;
+//   - folder-content-type is creatable but not deletable via funifier_delete.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELETE_TYPES = exports.SAVE_TYPES = exports.PUBLIC_LIST_TYPES = exports.RESOURCE_REGISTRY = void 0;
+exports.isGroovyType = isGroovyType;
+exports.listResource = listResource;
+exports.saveResource = saveResource;
+exports.deleteResource = deleteResource;
+const RAW_REGISTRY = {
+    trigger: { list: "listTriggers", publicList: true, save: "saveTrigger", delete: "deleteTrigger", groovy: true },
+    scheduler: { list: "listSchedulers", publicList: true, save: "saveScheduler", delete: "deleteScheduler", groovy: true },
+    aggregate: { list: "listAggregates", publicList: true, save: "saveAggregate", delete: "deleteAggregate", groovy: true },
+    websocket: { list: "listWebsockets", publicList: true, save: "saveWebsocket", saveIsNewArg: true, delete: "deleteWebsocket", groovy: true },
+    widget: { list: "listWidgets", publicList: true, save: "saveWidget", delete: "deleteWidget" },
+    "custom-page": { list: "listCustomPages", publicList: true, save: "saveCustomPage", delete: "deleteCustomPage" },
+    "public-endpoint": { list: "listPublicEndpoints", publicList: true, save: "savePublicEndpoint", delete: "deletePublicEndpoint", groovy: true },
+    "challenge-aggregate": { list: "listChallengeAggregates", publicList: true, save: "saveChallengeAggregate", delete: "deleteChallengeAggregate" },
+    "auth-module": { list: "listAuthModules", publicList: true, save: "saveAuthModule", saveIsNewArg: true, delete: "deleteAuthModule", groovy: true },
+    "ai-knowledge": { list: "listAiKnowledge", publicList: true, save: "saveAiKnowledge", delete: "deleteAiKnowledge" },
+    audit: { list: "listAudits", publicList: true, save: "saveAudit", delete: "deleteAudit" },
+    action: { list: "listActions", publicList: true, save: "saveAction", delete: "deleteAction" },
+    challenge: { list: "listChallenges", publicList: true, save: "saveChallenge", delete: "deleteChallenge" },
+    point: { list: "listPoints", publicList: true, save: "savePoint", delete: "deletePoint" },
+    level: { list: "listLevels", publicList: true, save: "saveLevel", delete: "deleteLevel" },
+    leaderboard: { list: "listLeaderboards", publicList: true, save: "saveLeaderboard", delete: "deleteLeaderboard" },
+    quiz: { list: "listQuizzes", publicList: true, save: "saveQuiz", delete: "deleteQuiz" },
+    "virtual-good-catalog": { list: "listVirtualGoodCatalogs", publicList: true, save: "saveVirtualGoodCatalog", delete: "deleteVirtualGoodCatalog" },
+    "virtual-good-item": { list: "listVirtualGoodItems", publicList: true, save: "saveVirtualGoodItem", delete: "deleteVirtualGoodItem" },
+    folder: { list: "listFolders", publicList: false, save: "saveFolder", delete: "deleteFolder" },
+    "folder-content": { list: "listFolderContents", publicList: false, save: "saveFolderContent", delete: "deleteFolderContent" },
+    "folder-content-type": { list: "listFolderContentTypes", publicList: false, save: "saveFolderContentType" },
+    "folder-log": { list: "listFolderLogs", publicList: false, save: "saveFolderLog", delete: "deleteFolderLog" },
+    role: { list: "listRoles", publicList: true },
+};
+// Re-typed as a uniform record so optional capabilities (save/delete/...) are
+// accessible on every entry, while ResourceType still carries the literal keys.
+exports.RESOURCE_REGISTRY = RAW_REGISTRY;
+const ALL_TYPES = Object.keys(exports.RESOURCE_REGISTRY);
+function typesWhere(pred) {
+    const arr = ALL_TYPES.filter((t) => pred(exports.RESOURCE_REGISTRY[t]));
+    return arr;
+}
+/** Types exposed in funifier_list and funifier_get (insertion order preserved). */
+exports.PUBLIC_LIST_TYPES = typesWhere((d) => d.publicList);
+/** Types exposed in funifier_save. */
+exports.SAVE_TYPES = typesWhere((d) => !!d.save);
+/** Types exposed in funifier_delete. */
+exports.DELETE_TYPES = typesWhere((d) => !!d.delete);
+/** Server-side script for this type is Groovy (vs plain JS). */
+function isGroovyType(type) {
+    return !!exports.RESOURCE_REGISTRY[type]?.groovy;
+}
+function requireDef(type) {
+    const def = exports.RESOURCE_REGISTRY[type];
+    if (!def)
+        throw new Error(`Unknown resource type: ${type}`);
+    return def;
+}
+/** List every item of a resource type via its registered api-client method. */
+function listResource(api, type) {
+    return api[requireDef(type).list]();
+}
+/** Save a resource via its registered method, threading the `isNew` arg when required. */
+function saveResource(api, type, data) {
+    const def = requireDef(type);
+    if (!def.save)
+        throw new Error(`Resource type does not support save: ${type}`);
+    return def.saveIsNewArg ? api[def.save](data, !data._id) : api[def.save](data);
+}
+/** Delete a resource by id via its registered method. */
+function deleteResource(api, type, id) {
+    const def = requireDef(type);
+    if (!def.delete)
+        throw new Error(`Resource type does not support delete: ${type}`);
+    return api[def.delete](id);
+}
+//# sourceMappingURL=_registry.js.map

package/dist/mcp/tools/_registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/_registry.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,kFAAkF;AAClF,4EAA4E;AAC5E,iFAAiF;AACjF,6EAA6E;AAC7E,EAAE;AACF,mFAAmF;AACnF,wDAAwD;AACxD,6EAA6E;AAC7E,6EAA6E;AAC7E,2FAA2F;AAC3F,8EAA8E;;;AAiE9E,oCAEC;AASD,oCAEC;AAGD,oCAIC;AAGD,wCAIC;AA3ED,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE;IAC/G,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE;IACvH,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE;IACvH,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE;IAC3I,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE;IAC7F,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAChH,iBAAiB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9I,qBAAqB,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IAChJ,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE;IAClJ,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACnH,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE;IAC7F,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE;IACzG,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE;IACzF,WAAW,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACjH,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACvF,sBAAsB,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACjJ,mBAAmB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,uBAAuB,EAAE;IACrI,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE;IAC9F,gBAAgB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,EAAE;IAC7H,qBAAqB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC3G,YAAY,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE;IAC7G,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE;CACR,CAAC;AAIxC,8EAA8E;AAC9E,gFAAgF;AACnE,QAAA,iBAAiB,GAAsC,YAAY,CAAC;AAEjF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,yBAAiB,CAAmB,CAAC;AAEnE,SAAS,UAAU,CAAC,IAAmC;IACrD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,yBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAwC,CAAC;AAClD,CAAC;AAED,mFAAmF;AACtE,QAAA,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACjE,sCAAsC;AACzB,QAAA,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtD,wCAAwC;AAC3B,QAAA,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,gEAAgE;AAChE,SAAgB,YAAY,CAAC,IAAY;IACvC,OAAO,CAAC,CAAE,yBAAiD,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB;IACpC,MAAM,GAAG,GAAG,yBAAiB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAgB,YAAY,CAAC,GAAQ,EAAE,IAAkB;IACvD,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,0FAA0F;AAC1F,SAAgB,YAAY,CAAC,GAAQ,EAAE,IAAkB,EAAE,IAAS;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,yDAAyD;AACzD,SAAgB,cAAc,CAAC,GAAQ,EAAE,IAAkB,EAAE,EAAU;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/mcp/tools/_registry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=_registry.test.d.ts.map

package/dist/mcp/tools/_registry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_registry.test.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_registry.test.ts"],"names":[],"mappings":""}

package/dist/mcp/tools/_registry.test.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const api_client_1 = require("../../core/api-client");
+const _registry_1 = require("./_registry");
+// A dummy client exposes the real method surface without any network calls.
+const api = (0, api_client_1.createAPIClient)({ apiKey: "k", secretKey: "s", serverUrl: "https://x.example" });
+// Frozen snapshots of the per-tool type sets BEFORE the registry refactor. These
+// guard against accidental drift: a registry edit that changes which types a tool
+// exposes must update these lists deliberately.
+const EXPECTED_PUBLIC_LIST = [
+    "trigger", "scheduler", "aggregate", "websocket", "widget", "custom-page",
+    "public-endpoint", "challenge-aggregate", "auth-module", "ai-knowledge", "audit",
+    "action", "challenge", "point", "level", "leaderboard", "quiz",
+    "virtual-good-catalog", "virtual-good-item", "role",
+];
+const EXPECTED_SAVE = [
+    "trigger", "scheduler", "aggregate", "websocket", "widget", "custom-page",
+    "public-endpoint", "challenge-aggregate", "auth-module", "ai-knowledge", "audit",
+    "action", "challenge", "point", "level", "leaderboard", "quiz",
+    "virtual-good-catalog", "virtual-good-item",
+    "folder", "folder-content", "folder-content-type", "folder-log",
+];
+const EXPECTED_DELETE = [
+    "trigger", "scheduler", "aggregate", "websocket", "widget", "custom-page",
+    "public-endpoint", "challenge-aggregate", "auth-module", "ai-knowledge", "audit",
+    "action", "challenge", "point", "level", "leaderboard", "quiz",
+    "virtual-good-catalog", "virtual-good-item",
+    "folder", "folder-content", "folder-log",
+];
+const EXPECTED_GROOVY = ["trigger", "scheduler", "aggregate", "websocket", "public-endpoint", "auth-module"];
+(0, vitest_1.describe)("resource registry — frozen membership (guards against drift)", () => {
+    (0, vitest_1.it)("funifier_list / funifier_get expose exactly the public-list types", () => {
+        (0, vitest_1.expect)([..._registry_1.PUBLIC_LIST_TYPES]).toEqual(EXPECTED_PUBLIC_LIST);
+    });
+    (0, vitest_1.it)("funifier_save exposes exactly the save types", () => {
+        (0, vitest_1.expect)([..._registry_1.SAVE_TYPES]).toEqual(EXPECTED_SAVE);
+    });
+    (0, vitest_1.it)("funifier_delete exposes exactly the delete types", () => {
+        (0, vitest_1.expect)([..._registry_1.DELETE_TYPES]).toEqual(EXPECTED_DELETE);
+    });
+    (0, vitest_1.it)("folder-content-type is creatable but not deletable", () => {
+        (0, vitest_1.expect)(_registry_1.SAVE_TYPES).toContain("folder-content-type");
+        (0, vitest_1.expect)(_registry_1.DELETE_TYPES).not.toContain("folder-content-type");
+    });
+    (0, vitest_1.it)("role is read-only (list/get only, no save/delete)", () => {
+        (0, vitest_1.expect)(_registry_1.PUBLIC_LIST_TYPES).toContain("role");
+        (0, vitest_1.expect)(_registry_1.SAVE_TYPES).not.toContain("role");
+        (0, vitest_1.expect)(_registry_1.DELETE_TYPES).not.toContain("role");
+    });
+    (0, vitest_1.it)("Groovy types match the previous GROOVY_TYPES set", () => {
+        const groovy = Object.keys(_registry_1.RESOURCE_REGISTRY).filter(_registry_1.isGroovyType);
+        (0, vitest_1.expect)(groovy.sort()).toEqual([...EXPECTED_GROOVY].sort());
+    });
+});
+(0, vitest_1.describe)("resource registry — every method name resolves on the api client", () => {
+    const allTypes = Object.keys(_registry_1.RESOURCE_REGISTRY);
+    (0, vitest_1.it)("every list method exists", () => {
+        for (const type of allTypes) {
+            const m = _registry_1.RESOURCE_REGISTRY[type].list;
+            (0, vitest_1.expect)(typeof api[m], `${type}.list → ${m}`).toBe("function");
+        }
+    });
+    (0, vitest_1.it)("every save method exists", () => {
+        for (const type of allTypes) {
+            const m = _registry_1.RESOURCE_REGISTRY[type].save;
+            if (m)
+                (0, vitest_1.expect)(typeof api[m], `${type}.save → ${m}`).toBe("function");
+        }
+    });
+    (0, vitest_1.it)("every delete method exists", () => {
+        for (const type of allTypes) {
+            const m = _registry_1.RESOURCE_REGISTRY[type].delete;
+            if (m)
+                (0, vitest_1.expect)(typeof api[m], `${type}.delete → ${m}`).toBe("function");
+        }
+    });
+});
+(0, vitest_1.describe)("resource registry — dispatch", () => {
+    (0, vitest_1.it)("listResource calls the registered list method", async () => {
+        const calls = [];
+        const fake = { listTriggers: async () => { calls.push("listTriggers"); return [{ _id: "1" }]; } };
+        const result = await (0, _registry_1.listResource)(fake, "trigger");
+        (0, vitest_1.expect)(calls).toEqual(["listTriggers"]);
+        (0, vitest_1.expect)(result).toEqual([{ _id: "1" }]);
+    });
+    (0, vitest_1.it)("saveResource threads the isNew arg for websocket/auth-module", async () => {
+        const seen = [];
+        const fake = { saveWebsocket: async (...args) => { seen.push(args); return {}; } };
+        await (0, _registry_1.saveResource)(fake, "websocket", { name: "n" }); // no _id ⇒ isNew true
+        (0, vitest_1.expect)(seen[0]).toEqual([{ name: "n" }, true]);
+    });
+    (0, vitest_1.it)("saveResource passes a single arg for plain types", async () => {
+        const seen = [];
+        const fake = { saveTrigger: async (...args) => { seen.push(args); return {}; } };
+        await (0, _registry_1.saveResource)(fake, "trigger", { _id: "x" });
+        (0, vitest_1.expect)(seen[0]).toEqual([{ _id: "x" }]);
+    });
+    (0, vitest_1.it)("deleteResource throws for a type that does not support delete", () => {
+        (0, vitest_1.expect)(() => (0, _registry_1.deleteResource)({}, "folder-content-type", "id")).toThrow("does not support delete");
+    });
+});
+//# sourceMappingURL=_registry.test.js.map

package/dist/mcp/tools/_registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_registry.test.js","sourceRoot":"","sources":["../../../src/mcp/tools/_registry.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,sDAAwD;AACxD,2CAUqB;AAErB,4EAA4E;AAC5E,MAAM,GAAG,GAAG,IAAA,4BAAe,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAE7F,iFAAiF;AACjF,kFAAkF;AAClF,gDAAgD;AAChD,MAAM,oBAAoB,GAAG;IAC3B,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa;IACzE,iBAAiB,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO;IAChF,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM;IAC9D,sBAAsB,EAAE,mBAAmB,EAAE,MAAM;CACpD,CAAC;AACF,MAAM,aAAa,GAAG;IACpB,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa;IACzE,iBAAiB,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO;IAChF,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM;IAC9D,sBAAsB,EAAE,mBAAmB;IAC3C,QAAQ,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,YAAY;CAChE,CAAC;AACF,MAAM,eAAe,GAAG;IACtB,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa;IACzE,iBAAiB,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO;IAChF,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM;IAC9D,sBAAsB,EAAE,mBAAmB;IAC3C,QAAQ,EAAE,gBAAgB,EAAE,YAAY;CACzC,CAAC;AACF,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAE7G,IAAA,iBAAQ,EAAC,8DAA8D,EAAE,GAAG,EAAE;IAC5E,IAAA,WAAE,EAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,IAAA,eAAM,EAAC,CAAC,GAAG,6BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,IAAA,eAAM,EAAC,CAAC,GAAG,sBAAU,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,IAAA,eAAM,EAAC,CAAC,GAAG,wBAAY,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,IAAA,eAAM,EAAC,sBAAU,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACpD,IAAA,eAAM,EAAC,wBAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,IAAA,eAAM,EAAC,6BAAiB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,sBAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,wBAAY,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,6BAAiB,CAAoB,CAAC,MAAM,CAAC,wBAAY,CAAC,CAAC;QACvF,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,kEAAkE,EAAE,GAAG,EAAE;IAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,6BAAiB,CAAmB,CAAC;IAElE,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,6BAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YACvC,IAAA,eAAM,EAAC,OAAQ,GAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,6BAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YACvC,IAAI,CAAC;gBAAE,IAAA,eAAM,EAAC,OAAQ,GAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,6BAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACzC,IAAI,CAAC;gBAAE,IAAA,eAAM,EAAC,OAAQ,GAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAA,WAAE,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAQ,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAY,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAU,EAAE,CAAC;QACvB,MAAM,IAAI,GAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAA,wBAAY,EAAC,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,sBAAsB;QAC5E,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,IAAI,GAAU,EAAE,CAAC;QACvB,MAAM,IAAI,GAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAA,wBAAY,EAAC,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,0BAAc,EAAC,EAAS,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAC1E,yBAAyB,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp/tools/_scope-engine.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Pure authorization engine mirroring SecurityFilter.doFilter from funifier-service.
+ * No I/O, no imports beyond types — fully unit-testable against a transcribed table.
+ *
+ * Source: SecurityFilter.java (funifier-service)
+ * Each rule carries a line reference so source drift can be detected via validate:skills claims.
+ */
+export type HttpMethod = "GET" | "POST" | "PUT" | "DELETE" | string;
+export interface ScopeDecision {
+    allowed: boolean;
+    rule: "public-path" | "all" | "exact" | "fallback-m1" | "fallback-m2" | "special-actionlog" | "special-mobile-device" | "database-keyword-missing" | "denied";
+    matchedToken?: string;
+    /** Minimal tokens that WOULD authorize this call — used to populate missing-findings. */
+    requiredTokens: string[];
+}
+/**
+ * Non-path-auditable tokens: their usage cannot be proven or disproven from a path manifest.
+ * These are always classified `manual-review`, never `excess`.
+ */
+export declare const MANUAL_REVIEW_TOKENS: ReadonlySet<string>;
+/** SecurityFilter.java:85-86: strip "/v3/", replace "/" → "_". */
+export declare function entityFull(path: string): string;
+/** SecurityFilter.java:226-227: GET→read, POST/PUT→write, else lowercase. */
+export declare function verbFor(method: HttpMethod): string;
+/** SecurityFilter.java:108-151: true when the path requires no scope. */
+export declare function isPublicPath(method: HttpMethod, path: string): boolean;
+/**
+ * Evaluate whether `scope` authorizes `method` on `path`, reproducing the exact decision
+ * tree of SecurityFilter.doFilter.
+ */
+export declare function evaluateScope(scope: string, method: HttpMethod, path: string): ScopeDecision;
+/**
+ * Returns the subset of tokens in `scope` that actually authorized at least one entry
+ * in `entries`. Used for excess-token calculation in the audit diff.
+ */
+export declare function usedTokens(scope: string, entries: ReadonlyArray<{
+    method: HttpMethod;
+    path: string;
+}>): Set<string>;
+//# sourceMappingURL=_scope-engine.d.ts.map

package/dist/mcp/tools/_scope-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EACA,aAAa,GACb,KAAK,GACL,OAAO,GACP,aAAa,GACb,aAAa,GACb,mBAAmB,GACnB,uBAAuB,GACvB,0BAA0B,GAC1B,QAAQ,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAKnD,CAAC;AAOH,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAIlD;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQtE;AAOD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CA0H5F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3D,GAAG,CAAC,MAAM,CAAC,CAoBb"}