funifier-mcp 0.3.17 → 0.3.19

package/dist/mcp/tools/save.js

@@ -38,32 +38,7 @@ const zod_1 = require("zod");
 const fs = __importStar(require("fs"));
 const _fetch_current_1 = require("./_fetch-current");
 const _merge_1 = require("./_merge");
-const RESOURCE_TYPES = [
-    "trigger",
-    "scheduler",
-    "aggregate",
-    "websocket",
-    "widget",
-    "custom-page",
-    "public-endpoint",
-    "challenge-aggregate",
-    "auth-module",
-    "ai-knowledge",
-    "audit",
-    "action",
-    "challenge",
-    "point",
-    "level",
-    "leaderboard",
-    "quiz",
-    "virtual-good-catalog",
-    "virtual-good-item",
-    "folder",
-    "folder-content",
-    "folder-content-type",
-    "folder-log",
-];
-const GROOVY_TYPES = new Set(["trigger", "scheduler", "aggregate", "websocket", "public-endpoint", "auth-module"]);
+const _registry_1 = require("./_registry");
 const COMPANION_FIELDS = {
     html: ".html",
     css: ".css",
@@ -72,7 +47,7 @@ const COMPANION_FIELDS = {
 };
 function mergeCompanions(jsonPath, type, doc) {
     const base = jsonPath.replace(/\.json$/, "");
-    const scriptExt = GROOVY_TYPES.has(type) ? ".script.groovy" : ".script.js";
+    const scriptExt = (0, _registry_1.isGroovyType)(type) ? ".script.groovy" : ".script.js";
     const fields = { ...COMPANION_FIELDS, script: scriptExt };
     const merged = { ...doc };
     for (const [field, ext] of Object.entries(fields)) {
@@ -163,64 +138,12 @@ function sanitizeChallenge(data) {
     }
     return d;
 }
-async function dispatchSave(api, type, data) {
-    switch (type) {
-        case "trigger":
-            return await api.saveTrigger(data);
-        case "scheduler":
-            return await api.saveScheduler(data);
-        case "aggregate":
-            return await api.saveAggregate(data);
-        case "websocket":
-            return await api.saveWebsocket(data, !data._id);
-        case "widget":
-            return await api.saveWidget(data);
-        case "custom-page":
-            return await api.saveCustomPage(data);
-        case "public-endpoint":
-            return await api.savePublicEndpoint(data);
-        case "challenge-aggregate":
-            return await api.saveChallengeAggregate(data);
-        case "auth-module":
-            return await api.saveAuthModule(data, !data._id);
-        case "ai-knowledge":
-            return await api.saveAiKnowledge(data);
-        case "audit":
-            return await api.saveAudit(data);
-        case "action":
-            return await api.saveAction(data);
-        case "challenge":
-            return await api.saveChallenge(data);
-        case "point":
-            return await api.savePoint(data);
-        case "level":
-            return await api.saveLevel(data);
-        case "leaderboard":
-            return await api.saveLeaderboard(data);
-        case "quiz":
-            return await api.saveQuiz(data);
-        case "virtual-good-catalog":
-            return await api.saveVirtualGoodCatalog(data);
-        case "virtual-good-item":
-            return await api.saveVirtualGoodItem(data);
-        case "folder":
-            return await api.saveFolder(data);
-        case "folder-content":
-            return await api.saveFolderContent(data);
-        case "folder-content-type":
-            return await api.saveFolderContentType(data);
-        case "folder-log":
-            return await api.saveFolderLog(data);
-        default:
-            throw new Error(`Unknown resource type: ${type}`);
-    }
-}
 function registerSaveTool(server, apiHolder) {
     server.registerTool("funifier_save", {
         title: "Save Funifier Resource",
         description: "Create or update a Funifier resource. On update (when `_id` is present in the payload), the current resource is fetched and any fields missing from the payload are preserved — you only need to send the fields you want to change. To clear a field, send it explicitly as `null`. Array and object fields are replaced wholesale when present in the payload.",
         inputSchema: {
-            type: zod_1.z.enum(RESOURCE_TYPES).describe("The resource type"),
+            type: zod_1.z.enum(_registry_1.SAVE_TYPES).describe("The resource type"),
             payload: zod_1.z.string().optional().describe("JSON string of the resource payload. On update, send only the fields you want to change (plus `_id`). Use `file` instead when the payload is too large to pass inline."),
             file: zod_1.z.string().optional().describe("Path to a JSON file containing the resource payload. Use this when the payload is too large to pass inline (e.g. a file previously written by funifier_get)."),
         },
@@ -252,7 +175,7 @@ function registerSaveTool(server, apiHolder) {
                 }
                 // if current is null: _id is user-defined for a new resource — create as-is
             }
-            const result = await dispatchSave(api, type, toSave);
+            const result = await (0, _registry_1.saveResource)(api, type, toSave);
             // Funifier sometimes returns 200/201 with an error body
             if (result?.status === "ERROR" || result?.status === "error" ||
                 result?.errorCode != null || result?.errorMessage != null) {

package/dist/mcp/tools/save.js.map

@@ -1 +1 @@
-{"version":3,"file":"save.js","sourceRoot":"","sources":["../../../src/mcp/tools/save.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgMA,4CAsEC;AAtQD,6BAAwB;AACxB,uCAAyB;AAIzB,qDAAkE;AAClE,qCAAyC;AAEzC,MAAM,cAAc,GAAG;IACrB,SAAS;IACT,WAAW;IACX,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa;IACb,iBAAiB;IACjB,qBAAqB;IACrB,aAAa;IACb,cAAc;IACd,OAAO;IACP,QAAQ;IACR,WAAW;IACX,OAAO;IACP,OAAO;IACP,aAAa;IACb,MAAM;IACN,sBAAsB;IACtB,mBAAmB;IACnB,QAAQ;IACR,gBAAgB;IAChB,qBAAqB;IACrB,YAAY;CACJ,CAAC;AAEX,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEnH,MAAM,gBAAgB,GAA2B;IAC/C,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,MAAM;IACX,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,gBAAgB;CAC5B,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY,EAAE,GAAQ;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,MAAM,MAAM,GAAG,EAAE,GAAG,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0CAA0C;AAC1C,MAAM,cAAc,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC9G,MAAM,gBAAgB,GAA2B;IAC/C,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IAC9D,oBAAoB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IACxD,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE;CACxD,CAAC;AACF,MAAM,YAAY,GAA2B;IAC3C,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1E,uBAAuB,EAAE,CAAC,EAAE,uBAAuB,EAAE,CAAC;CACvD,CAAC;AACF,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9E,CAAC;AACF,MAAM,eAAe,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;AAC9F,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;IAC/D,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACjE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;CAC/C,CAAC;AACF,MAAM,mBAAmB,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AACjJ,MAAM,mBAAmB,GAA2B,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAElG,SAAS,UAAU,CAAC,KAAU,EAAE,GAA2B;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAS;IAClC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAEtB,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAClD,IAAI,EAAE,KAAK,SAAS;gBAAE,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;oBACnC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;oBACpD,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;YACjC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YACrD,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YACpD,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YACpD,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAClG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAQ,EAAE,IAAkB,EAAE,IAAS;IACjE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACrC,KAAK,WAAW;YACd,OAAO,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,WAAW;YACd,OAAO,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,WAAW;YACd,OAAO,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,KAAK,QAAQ;YACX,OAAO,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,aAAa;YAChB,OAAO,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,iBAAiB;YACpB,OAAO,MAAM,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,qBAAqB;YACxB,OAAO,MAAM,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,KAAK,aAAa;YAChB,OAAO,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,KAAK,cAAc;YACjB,OAAO,MAAM,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,KAAK,OAAO;YACV,OAAO,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,WAAW;YACd,OAAO,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,OAAO;YACV,OAAO,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,aAAa;YAChB,OAAO,MAAM,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,KAAK,MAAM;YACT,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,sBAAsB;YACzB,OAAO,MAAM,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,KAAK,mBAAmB;YACtB,OAAO,MAAM,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,QAAQ;YACX,OAAO,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,gBAAgB;YACnB,OAAO,MAAM,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,qBAAqB;YACxB,OAAO,MAAM,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC/C,KAAK,YAAY;YACf,OAAO,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAiB,EAAE,SAAoB;IACtE,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,kWAAkW;QACpW,WAAW,EAAE;YACX,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC1D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wKAAwK,CAAC;YACjN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8JAA8J,CAAC;SACrM;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;oBACjF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,gDAAgD;YAChD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvE,IAAI,MAAM,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnE,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,MAAM,IAAA,iCAAgB,EAAC,GAAG,EAAE,IAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC9E,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,GAAG,IAAA,sBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1C,CAAC;gBACD,4EAA4E;YAC9E,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAoB,EAAE,MAAM,CAAC,CAAC;YAErE,wDAAwD;YACxD,IACE,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO;gBACxD,MAAM,EAAE,SAAS,IAAI,IAAI,IAAI,MAAM,EAAE,YAAY,IAAI,IAAI,EACzD,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACpG,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,IAAI,KAAK,QAAQ,EAAE,EAAE,CAAC;oBACtE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;YAElD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,6BAA6B,EAAE,EAAE,EAAE,CAAC;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"save.js","sourceRoot":"","sources":["../../../src/mcp/tools/save.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+GA,4CAsEC;AArLD,6BAAwB;AACxB,uCAAyB;AAGzB,qDAAoD;AACpD,qCAAyC;AACzC,2CAAmF;AAEnF,MAAM,gBAAgB,GAA2B;IAC/C,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,MAAM;IACX,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,gBAAgB;CAC5B,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY,EAAE,GAAQ;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAA,wBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;IACvE,MAAM,MAAM,GAAG,EAAE,GAAG,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0CAA0C;AAC1C,MAAM,cAAc,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC9G,MAAM,gBAAgB,GAA2B;IAC/C,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IAC9D,oBAAoB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IACxD,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE;CACxD,CAAC;AACF,MAAM,YAAY,GAA2B;IAC3C,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1E,uBAAuB,EAAE,CAAC,EAAE,uBAAuB,EAAE,CAAC;CACvD,CAAC;AACF,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9E,CAAC;AACF,MAAM,eAAe,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;AAC9F,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;IAC/D,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACjE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;CAC/C,CAAC;AACF,MAAM,mBAAmB,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AACjJ,MAAM,mBAAmB,GAA2B,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAElG,SAAS,UAAU,CAAC,KAAU,EAAE,GAA2B;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAS;IAClC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAEtB,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAClD,IAAI,EAAE,KAAK,SAAS;gBAAE,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;oBACnC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;oBACpD,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;YACjC,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YACrD,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YACpD,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YACpD,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAClG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAiB,EAAE,SAAoB;IACtE,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,kWAAkW;QACpW,WAAW,EAAE;YACX,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,sBAAU,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACtD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wKAAwK,CAAC;YACjN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8JAA8J,CAAC;SACrM;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;oBACjF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,gDAAgD;YAChD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvE,IAAI,MAAM,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnE,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,MAAM,IAAA,iCAAgB,EAAC,GAAG,EAAE,IAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC9E,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,GAAG,IAAA,sBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1C,CAAC;gBACD,4EAA4E;YAC9E,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAY,EAAC,GAAG,EAAE,IAAoB,EAAE,MAAM,CAAC,CAAC;YAErE,wDAAwD;YACxD,IACE,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO;gBACxD,MAAM,EAAE,SAAS,IAAI,IAAI,IAAI,MAAM,EAAE,YAAY,IAAI,IAAI,EACzD,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACpG,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,IAAI,KAAK,QAAQ,EAAE,EAAE,CAAC;oBACtE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;YAElD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,6BAA6B,EAAE,EAAE,EAAE,CAAC;aAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "funifier-mcp",
-  "version": "0.3.17",
+  "version": "0.3.19",
   "description": "Funifier AI toolkit — MCP server, API client, and Claude Code skills for the Funifier gamification platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -16,6 +16,7 @@
     ".github/copilot-instructions.md",
     ".cursor/rules/funifier.mdc",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "repository": {
@@ -72,4 +73,4 @@
   "engines": {
     "node": ">=18"
   }
-}
+}

package/skills/funifier/SKILL.md

@@ -35,7 +35,8 @@ Then read a result with `funifier_read_doc path=<path>`.
 |-------------|-----------|
 | Create a Funifier trigger — guided workflow from entity/event selection to Groovy code generation | `references/create-trigger.md` |
 | Create a Funifier scheduler — guided workflow from naming and cron expression to Groovy code generation | `references/create-scheduler.md` |
-| Create a Funifier prepared aggregate — guided workflow for building MongoDB aggregate pipelines for reports and dashboards | `references/create-aggregate.md` |
+| Run an ad-hoc MongoDB aggregate (one-off query) on a Funifier collection via POST /v3/database/{collection}/aggregate — for reports and exploration, without saving a resource | `references/query-aggregate.md` |
+| Create/edit a Funifier prepared aggregate — a saved pipeline with _id, $param placeholders, optional Groovy script, cache and execution via POST /v3/find/{id}; for reusable dashboards and parametrized reports | `references/create-aggregate.md` |
 | Create, edit, or query Date fields safely via REST, funifier_database, triggers, schedulers, aggregate, and prepared aggregate; use whenever a payload or filter contains dates | `references/date-handling.md` |
 | Create a Funifier challenge — missions with action rules and point rewards | `references/create-challenge.md` |
 | Create a Funifier action — define trackable player behaviors with attributes | `references/create-action.md` |
@@ -68,6 +69,7 @@ Then read a result with `funifier_read_doc path=<path>`.
 | Import or export Funifier platform data via CSV — bulk player import, performance export, and cross-system data migration; use when loading or extracting large datasets, not for individual record CRUD or media file uploads (use funifier-upload-file) | `references/import-csv.md` |
 | Upload files to Funifier — images and documents for player avatars, challenge resources, and visual assets; use when adding media to the platform, not for CSV data import (use funifier-import-csv) or static frontend hosting (use funifier-implement-frontend) | `references/upload-file.md` |
 | Create, list, and drop MongoDB single-field indexes on Funifier collections via the REST API. Composite (multi-field) indexes are NOT supported by this endpoint — see Limitation section. | `references/manage-indexes.md` |
+| Cross-check a project's Funifier API calls against the live security document — scan code for usage, build an evidence-backed manifest, run the deterministic audit engine, and report missing scopes, excess tokens, and static danger findings; use when debugging 401s, auditing minimum privilege, or verifying permissions before deploying; audit is read-only and never changes any configuration | `references/audit-permissions.md` |
 
 ## Documented Modules
 

package/skills/funifier/references/audit-permissions.md

@@ -0,0 +1,97 @@
+# funifier-audit-permissions
+
+Cross-check a project's Funifier API calls against the live security document — scan code for usage, build an evidence-backed manifest, run the deterministic audit engine, and report missing scopes, excess tokens, and static danger findings; use when debugging 401s, auditing minimum privilege, or verifying permissions before deploying; audit is read-only and never changes any configuration
+
+---
+
+## Before starting — find relevant docs
+
+Use the `funifier_search_docs` MCP tool to load only what you need:
+
+```
+funifier_search_docs "audit permissions security scope 401 missing-scope excess-token danger manifest bearer basic app-secret role least-privilege"
+```
+
+Then read the most relevant results with `funifier_read_doc path=<path>`.
+
+## Primary docs for this skill
+
+If search returns insufficient results, read these directly:
+
+- `funifier_read_doc path=guides/permission-audit`
+- `funifier_read_doc path=modules/security`
+
+## Steps
+
+## Regras críticas
+
+- **O audit é read-only.** Nenhuma configuração é alterada. O MCP apenas lê o documento de segurança e avalia o manifest.
+- **Bearer tokens embtem o scope no login.** Corrigir o role não invalida tokens existentes — o jogador precisa fazer login novamente.
+- **Excess findings podem ser necessários** a consumidores fora deste manifest. Verifique antes de remover qualquer token.
+- **Low-confidence entries** (URLs dinâmicas ou wrappers): use `"confidence": "low"` e um path com o prefixo mais específico possível. Nunca omita chamadas suspeitas.
+
+---
+
+## Steps
+
+### 1. Descobrir chamadas Funifier no projeto
+
+Procure no código todas as chamadas à API Funifier (endpoints, métodos HTTP e mecanismo de auth):
+
+- **Com GitNexus indexado:** `gitnexus_query("funifier API calls")` para localizar call sites
+- **Fallback (busca em código):** grep por `/v3/`, `funifier`, `apiKey`, `app_secret`, `Authorization`
+- Para cada chamada, registre: `method`, `path`, `auth context` (ver tabela em `guides/permission-audit.md` §2), e `file:line` como `evidence`
+- Classifique o auth:
+  - Sem secret / token público → `"public"`
+  - Player Bearer → `"player"`
+  - App secret em config/env → `"app:<name>"` (use o `name` da entrada em `apps[]`)
+
+### 2. Montar o manifest
+
+Construa o JSON seguindo o schema de `guides/permission-audit.md` §3. Exemplo mínimo:
+
+```json
+{
+  "version": 1,
+  "entries": [
+    { "method": "GET",  "path": "/v3/player/me",    "auth": "player",      "evidence": "src/api.ts:12" },
+    { "method": "POST", "path": "/v3/action/log",   "auth": "player",      "evidence": "src/events.ts:58" },
+    { "method": "POST", "path": "/v3/player",        "auth": "app:backend", "evidence": "workers/sync.ts:34" },
+    { "method": "GET",  "path": "/v3/database/orders", "auth": "app:backend", "evidence": "workers/sync.ts:80" }
+  ]
+}
+```
+
+Para chamadas com URL dinâmica: use o prefixo mais específico e defina `"confidence": "low"`.
+
+### 3. Executar o audit
+
+```
+funifier_permissions action=audit data=<manifest JSON>
+```
+
+O resultado inclui:
+- `missing`: chamadas que seriam negadas — 401 em produção. Campo `requiredTokens` indica o token mínimo.
+- `excess`: tokens concedidos que nenhuma entrada requer. Campo `narrowingSuggestion` para broad tokens.
+- `danger`: riscos estáticos no documento de segurança (independentes do manifest).
+- `manual-review`: tokens não verificáveis por análise de paths (`cross_domain`, `write_upload`, etc.).
+- `missing-principal`: auth context referenciado no manifest não existe no documento de segurança.
+
+### 4. Apresentar o relatório e encaminhar remediação
+
+Apresente os findings agrupados por severidade (`missing` primeiro). Para cada `missing`:
+- Indique o token exato necessário (`requiredTokens`), a chamada e a evidência.
+- **Não aplique a correção automaticamente.** Apresente a ação sugerida ao utilizador e aguarde aprovação.
+- Quando aprovado: `funifier_permissions action=save_security_role` ou `save_api_app` (cada mutação cria backup automático).
+
+Para `excess`: adverta que o token pode ser necessário a consumidores fora deste manifest antes de sugerir remoção.
+
+Para `danger`: explique o risco e sugira remoção ou restrição do scope afetado como ação separada.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| SecurityFilter.doFilter evaluates (method, path) by computing verb (GET→read, POST/PUT→write, DELETE→delete) and entity_full (path after /v3/ with slash→underscore), then matching scope tokens in order: {verb}_all, exact {verb}_{entity_full}, fallback {verb}_{prefix}_all minus-1 and minus-2 trailing segments | ✓ verified | Class:src/main/java/com/funifier/rest/v3/filter/SecurityFilter.java:SecurityFilter |
+| DatabaseRest requires the literal 'database' scope keyword on ALL /v3/database handlers including GET operations — grammar tokens such as read_all alone are insufficient; this is enforced within SecurityFilter.doFilter before requests reach DatabaseRest handlers | ✓ verified | Method:src/main/java/com/funifier/rest/v3/filter/SecurityFilter.java:SecurityFilter.doFilter#3 |
+| Bearer tokens embed the player's role scope string at login time; role scope changes only affect sessions created after the change — existing live Bearer tokens carry the scope at their issuance time | ✓ verified | Class:src/main/java/com/funifier/rest/v3/filter/SecurityFilter.java:SecurityFilter |

package/skills/funifier/references/configure-security.md

@@ -112,3 +112,9 @@ funifier_permissions action=restore_backup backup_path=<path retornado por list_
 O restore valida que o `serverUrl` do snapshot coincide com a conexão atual — não aplique backup de outro tenant. O próprio restore também gera um snapshot prévio, permitindo desfazer o rollback.
 
 Variáveis opcionais: `FUNIFIER_PROJECT_ROOT` (diretório do projeto; definida nos configs gerados pelo `init`) e `FUNIFIER_BACKUP_ROOT` (substitui `.funifier/backups/` por outro diretório). Snapshots não expiram automaticamente — remova arquivos antigos manualmente quando necessário.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+

package/skills/funifier/references/create-action.md

@@ -91,3 +91,10 @@ funifier_list type=action search=<_id>
 ```
 
 Do NOT use `funifier_logs` — that is only for triggers and schedulers.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| ActionLog is the entity class recording each player action event with fields actionId, userId, attributes, time, and id | ✓ verified | Class:src/main/java/com/funifier/engine/action/ActionLog.java:ActionLog |
+| ActionManager handles action registration and dispatching in funifier-service | ✓ verified | Class:src/main/java/com/funifier/engine/action/ActionManager.java:ActionManager |

package/skills/funifier/references/create-aggregate.md

@@ -1,6 +1,6 @@
 # funifier-create-aggregate
 
-Create a Funifier prepared aggregate — guided workflow for building MongoDB aggregate pipelines for reports and dashboards
+Create/edit a Funifier prepared aggregate — a saved pipeline with _id, $param placeholders, optional Groovy script, cache and execution via POST /v3/find/{id}; for reusable dashboards and parametrized reports
 
 ---
 
@@ -48,7 +48,7 @@ Note que `aggregate` é uma **string** contendo JSON serializado (com `\n` e `\"
 Use the `funifier_search_docs` MCP tool to load only what you need:
 
 ```
-funifier_search_docs "aggregate mongodb pipeline report dashboard query prepared"
+funifier_search_docs "aggregate mongodb pipeline prepared dashboard param script find reusable"
 ```
 
 Then read the most relevant results with `funifier_read_doc path=<path>`.
@@ -63,118 +63,138 @@ If search returns insufficient results, read these directly:
 
 ## Steps
 
-> **Prepared aggregate** = pipeline MongoDB salvo na plataforma com `_id` e executado por ID via `POST /v3/find/<id>`, com parâmetros dinâmicos (`"$param:nome"`). Diferente do aggregate **ad-hoc** (`POST /v3/database/{collection}/aggregate`), usado para testar pipelines.
+> **Prepared aggregate** = pipeline MongoDB **salvo** na plataforma (coleção `prepared_aggregate`) com `_id`, parâmetros dinâmicos (`"$param:nome"`) e um `script` Groovy opcional, executado por ID via `POST /v3/find/<id>`. Use para dashboards e relatórios **reutilizáveis**. Para uma consulta **pontual sem salvar**, use a skill `funifier-query-aggregate` (ad-hoc).
 
-### Coleções principais
+> ⚠️ **"Salvo" ≠ "funcionando".** O `funifier_save type=aggregate` persiste via `PUT /v3/database/prepared_aggregate` (upsert genérico de banco) e **NÃO compila** o `script`. Um script quebrado é "salvo com sucesso" e só falha — silenciosamente — na execução. Por isso o fluxo abaixo é **montar → salvar → verificar**, nunca só salvar.
 
-| Coleção | Conteúdo chave |
-|---|---|
-| `achievement` | Conquistas — `type`: 0=Point, 1=Challenge, 2=VirtualGood, 3=Level |
-| `action_log` | Ações executadas — `actionId`, `userId`, `attributes`, `time` |
-| `player` | Jogadores — `_id`, `name`, `teams`, `extra` |
-| `challenge` | Desafios — `_id`, `challenge`, `rules`, `points` |
-| `point_category` | Tipos de ponto — `_id`, `category`, `shortName` |
-| `catalog_item` | Loja virtual — `_id`, `catalogId`, `name`, `requires` |
+### 1. Definir a consulta e montar o pipeline
 
-Se o pipeline filtrar ou criar campos de data, leia também `references/date-handling.md` antes de montar o payload.
+- Qual coleção, filtro, agrupamento, ordenação e limite? Quais valores serão **parâmetros** (`$param`)?
+- Monte/teste o pipeline como uma consulta **ad-hoc** primeiro (skill `funifier-query-aggregate`) — não reensine a execução direta aqui. As relações de coleção para `$lookup` estão lá e em `aggregates.md` §3.
+- Confira se já existe: `funifier_list type=aggregate search=<titulo>`.
 
-### Expressões de data Funifier
+### 2. Campos do recurso
 
-Para regras completas de criação/edição/consulta de datas via REST, triggers, schedulers, aggregate e prepared aggregate, leia `references/date-handling.md`.
+Todos embasados em `PreparedAggregate` (funifier-service). Apenas `_id`, `title`, `collection`, `aggregate` são essenciais; o resto é opcional.
 
-| Expressão | Significado |
+| Campo | Semântica |
 |---|---|
-| `{"$date": "-0d-"}` | Início do dia atual |
-| `{"$date": "-0M-"}` | Início do mês atual |
-| `{"$date": "-0M+"}` | Fim do mês atual |
-| `{"$date": "-0y-"}` | Início do ano atual |
-| `{"$date": "-1d-"}` | Início do dia anterior |
+| `_id` | Identificador do recurso (usado em `POST /v3/find/<id>`). |
+| `title` | Nome legível. |
+| `description` | Descrição livre (opcional). |
+| `collection` | Coleção-base sobre a qual o pipeline roda. |
+| `aggregate` | **String** contendo um array JSON válido (o pipeline). Ver §3. |
+| `script` | Groovy opcional `void prepare(aggregations, params)` (`""` se não precisar). Ver §6. |
+| `timeout` | Sobrescreve o timeout padrão de **5s** do script (em segundos). |
+| `cache` | Expressão de duração Funifier (ex.: `"30m"`, `"3h"`) — TTL do resultado em cache, servido pelo mesmo `POST /v3/find/<id>`. |
+| `cache_before_find` | Aplica o cache antes do find (caso avançado). |
+| `parent` | Consulta o resultado **em cache de outro find** em vez de uma coleção (find-sobre-find, **um nível**; o parent deve usar `collection`). |
 
-**Importante:** em aggregate direto e prepared aggregate, prefira expressões relativas Funifier dentro de `$date` (`-0M-`, `-0M+`) ou timestamps em milissegundos para datas absolutas. Para datas absolutas parametrizadas em prepared aggregate, normalize no `script` com `DateUtil.parse(...)` e substitua diretamente em `$gte`/`$lte`.
+### 3. Formato do campo `aggregate` (string JSON)
 
----
+O campo `aggregate` é uma **`String`** lida na execução com `JsonUtil.fromJson(aggregate, List.class)`. **Só importa a validade do JSON** — indentação, `\n` e minificação são irrelevantes. Construa um array nativo e serialize com `JSON.stringify(pipeline)`, deixando o escape com o MCP.
 
-## Steps
+> ⚠️ **Não envie um array JSON nativo** em `aggregate` — o campo da entidade é `String`; um array nativo gera um recurso que falha na execução. Minificado em uma linha **é aceito** (não existe regra de "identado, nunca minificado").
 
-### 1. Identificar a necessidade
+Exemplo (identado só por legibilidade — minificado também funciona):
+```json
+{
+  "_id": "top_players_month",
+  "title": "Top Players Month",
+  "collection": "achievement",
+  "aggregate": "[{\"$match\":{\"type\":0,\"item\":\"xp\"}},{\"$group\":{\"_id\":\"$player\",\"total\":{\"$sum\":\"$total\"}}},{\"$sort\":{\"total\":-1}},{\"$limit\":10}]",
+  "script": "",
+  "cache": "30m"
+}
+```
 
-- Qual collection tem os dados? (ver tabela acima)
-- Qual o filtro? (período, jogador, tipo de conquista)
-- Qual o agrupamento? (por jogador, por dia, por equipe)
-- Qual ordenação e limite?
+> Via `funifier_save type=aggregate file=...`, o pipeline pode vir do arquivo companheiro `.pipeline.json` — o MCP serializa e escapa para você.
 
-### 2. Verificar se já existe
+### 4. Parâmetros `$param`
 
-```
-funifier_list type=aggregate search=<titulo>
-```
+- Um placeholder deve ser o **valor de string JSON inteiro**: `"$param:nome"`. A substituição é a **nível de valor** (sem concatenação/interpolação de substring) e o valor assume o **tipo** do param: string, número, `Long` (millis), `Date`, array ou objeto.
+- **Param ausente vira `null`** → filtro silenciosamente não casa nada. Confirme os nomes esperados com `funifier_execute type=aggregate id=<id> mode=params` (varredura literal de `"$param:NOME"` na string salva).
+- Avançado: pode-se injetar um **sub-pipeline**, nome de **coleção** ou `Map`/`List` via param (ex.: `"$param:collection"`, `"$param:pipelineSearch"`) quando o `script` faz `params.put` de um valor real.
 
-### 3. Construir e testar o pipeline
+### 5. Datas parametrizadas
 
-Top 10 jogadores com mais pontos no mês:
-```json
-[
-  {"$match": {"type": 0, "item": "xp", "time": {"$gte": {"$date": "-0M-"}, "$lte": {"$date": "-0M+"}}}},
-  {"$group": {"_id": "$player", "total": {"$sum": "$total"}}},
-  {"$sort": {"total": -1}},
-  {"$lookup": {"from": "player", "localField": "_id", "foreignField": "_id", "as": "p"}},
-  {"$unwind": "$p"},
-  {"$project": {"_id": 1, "player": "$p.name", "total": 1}},
-  {"$limit": 10}
-]
-```
+A gramática `{"$date": "-0M-"}` (relativa, não-parametrizada) pode ir **direto** no pipeline salvo — detalhada em `aggregates.md` §4 (dono único; `funifier_read_doc path=guides/aggregates`). Para uma data **dinâmica vinda de param**, o padrão real é:
 
-Testar diretamente antes de registrar:
 ```
-POST /v3/database/achievement/aggregate
+pipeline:  { "$match": { "time": { "$gte": {"$date": "$param:start"}, "$lte": {"$date": "$param:end"} } } }
+script:    params.put("start", startDate.getTime())   // millis (Long) — ou injete um Date
 ```
 
-### 4. Registrar como Prepared Aggregate
+Omitir o param de data na execução → o engine substitui por `null` e o filtro não casa nada. Ver também a skill `funifier-date-handling`.
 
-**Formatação obrigatória:** o campo `aggregate` é o pipeline serializado como **string identada**, com `\n` ao fim de cada linha (equivalente a `JSON.stringify(pipeline, null, 4)`) — **nunca** minificado em uma linha única. O `script` Groovy também preserva indentação e `\n`. Os escapes (`\"`, `\\`) seguem a seção "Formato do payload" acima.
+### 6. Script Groovy `prepare()` (opcional)
 
-```json
-{
-  "_id": "top_players_month",
-  "title": "Top Players Month",
-  "collection": "achievement",
-  "aggregate": "[\n    {\n        \"$match\": {\n            \"type\": 0,\n            \"item\": \"xp\"\n        }\n    },\n    {\n        \"$group\": {\n            \"_id\": \"$player\",\n            \"total\": {\n                \"$sum\": \"$total\"\n            }\n        }\n    },\n    {\n        \"$sort\": {\n            \"total\": -1\n        }\n    },\n    {\n        \"$limit\": 10\n    }\n]",
-  "script": ""
+Se o pipeline só usa placeholders `"$param:nome"`, `script: ""` é válido — não precisa de `prepare()`. Quando precisar de lógica (resolver janela de datas, guardas), o contrato é:
+
+- **Assinatura de entrada:** `void prepare(aggregations, params)`. Métodos auxiliares extras são permitidos.
+- **Ambiente:** roda dentro de uma `class FunifierTrigger` gerada, que já importa `DateUtil`, `JsonUtil`, `manager` (`ManagerFactory`), as entidades, e o default `java.util.*` do Groovy. O `context` expõe **apenas** `player`. `println(...)` é capturado (visível no `script_outputs` do analyze). **Timeout padrão 5s** (sobrescrevível via `timeout`).
+- **Sandbox:** compilado sob um whitelist de tokens de operador (`SecureASTCustomizer` + `TriggerExpressionChecker`) — **sem ternário `?:`**, **sem bitwise**. Mantenha a lógica simples.
+
+Exemplo (resolve janela do mês e guarda usuário inativo):
+```groovy
+void prepare(aggregations, params) {
+    params.put("start", DateUtil.fromKeyword("-0M-").getTime());
+    params.put("end", DateUtil.fromKeyword("-0M+").getTime());
+    String player = context.get("player");
+    if (player == null || isInactive(player)) {
+        params.put("player", "__none__"); // sentinela → resultado vazio controlado
+    } else {
+        params.put("player", player);
+    }
 }
-```
 
-```
-funifier_save type=aggregate payload=<json>
+boolean isInactive(String player) {
+    def p = manager.getJongoConnection().getCollection("player").findOne("{_id:#}", player).as(Map.class);
+    return p == null;
+}
 ```
 
-### 5. Validar
+### 7. Antes de salvar: índices e forma da query
+
+1. Liste os campos que dirigem o plano: filtros de `$match`, campos de `$sort`, e `localField`/`foreignField` de cada `$lookup` (atenção ao `foreignField` na coleção `from`).
+2. Cheque/crie índices: `funifier_index action=list collection=<coll>`; crie os single-field faltantes com `funifier_index action=create`. Índice **composto** (ex.: `{player:1,time:-1}`) → REST é single-field apenas; use o caminho Groovy `createIndex(...append...)` (ver skill `funifier-manage-indexes`).
+3. Boas práticas: `$match` cedo · reduzir com `$project`/`$match` antes do `$lookup` · `$sort` seguido de `$limit` · cuidado com explosão do `$unwind` · `$lookup.foreignField` indexado.
+4. Prepared usa `allowDiskUse(true)`; ainda assim raciocine a cobertura de índice sobre o **`aggregate_step_3`** (pipeline já com `$param` resolvido), pois os valores de param mudam o filtro efetivo. Ao **editar** um aggregate, refaça esta checagem nos estágios alterados.
+
+### 8. Salvar
 
 ```
-funifier_list type=aggregate search=<titulo>
+funifier_save type=aggregate payload=<json>
 ```
 
-### 6. Executar o Prepared Aggregate
+Isto persiste, mas **não verifica** nada (ver aviso no topo). "Salvo" é um estado; "verificado funcionando" é outro, alcançado no passo 9.
 
-**Endpoint correto:** `POST /v3/find/<id>` com os parâmetros no corpo JSON.
+### 9. Verificar (obrigatório)
 
-> ⚠️ NÃO use `GET /v3/database/aggregate/{id}` — retorna null/405 silenciosamente, sem mensagem de erro. O endpoint de execução foge do padrão CRUD da plataforma.
+Use os modos do `funifier_execute` (o REST cru é só fallback):
 
-Via MCP (`params` é uma string JSON):
 ```
-funifier_execute type=aggregate id=<id> params={"player":"abc"}
+funifier_execute type=aggregate id=<id> mode=params              # nomes de $param esperados
+funifier_execute type=aggregate id=<id> mode=analyze params={...} # dry-run: NÃO roda no Mongo
+funifier_execute type=aggregate id=<id> params={...}              # mode=run (default): resultado real
 ```
 
-Via frontend:
-```js
-api.post('/v3/find/<id>', { player: 'abc' })
-```
+O `mode=analyze` é uma **inspeção (dry-run)** — compila/roda o `script`, aplica a substituição de `$param` e devolve:
+
+| Campo | Conteúdo |
+|---|---|
+| `script_exceptions` | Erros de compilação/execução do Groovy — **vazio = script ok** |
+| `script_outputs` | Saídas de `println` do `prepare()` |
+| `obj` | A **definição salva** (a entidade, não os resultados) |
+| `aggregate_step_2` | Pipeline **após** o `prepare()` |
+| `aggregate_step_3` | Pipeline **após** a substituição dos `"$param:nome"` |
+
+Diagnóstico: resultado de `mode=run` vazio **ou** recurso com `script` não-vazio → rode `mode=analyze` e leia `script_exceptions` (script quebrado) e `aggregate_step_3` (se um param virou `null`, o `$match` não casa nada — isso distingue "script quebrado" de "resultado legitimamente vazio").
+
+> ⚠️ NÃO execute via `GET /v3/database/aggregate/{id}` — retorna null/405 silenciosamente. A execução é `POST /v3/find/<id>` (corpo JSON, nunca query string). Via frontend: `api.post('/v3/find/<id>', { player: 'abc' })`.
 
-| Regra | Detalhe |
-|-------|---------|
-| Método HTTP | POST obrigatório |
-| Params | No corpo JSON — não na query string |
-| Substituição | Cada chave do corpo substitui `"$param:<chave>"` no pipeline diretamente |
-| `context` no Groovy | Só expõe o player autenticado — `context.get("outro")` retorna `null` |
-| Script vazio | Se o pipeline só usa `"$param:nome"`, o `script` pode ser `""` — não precisa de `prepare()` |
+## Verified References
 
-Se o resultado vier vazio ou inesperado: `GET /v3/find/<id>/params` lista os params que o pipeline espera, e `POST /v3/prepared/aggregate/<id>/analyze` (mesmo corpo da execução) retorna outputs/exceções do script e o resultado de cada etapa do pipeline (`aggregate_step_N`) — veja `references/debug.md`.
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| DatabaseManager provides MongoDB connection and collection access for aggregate queries in Groovy scripts | ✓ verified | Class:src/main/java/com/funifier/engine/database/DatabaseManager.java:DatabaseManager |

package/skills/funifier/references/create-audit.md

@@ -113,3 +113,11 @@ Filtros combináveis em `$match`: `user`/`login` (ator), `type` (`studio`/`playe
 ### 6. Exclusão (cuidado)
 
 `funifier_delete type=audit id=<id>` remove a config **e todos os seus logs em cascata**. Confirme com o usuário antes.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| Audit config fields are _id, title, active, entity, event, clean, type with event constants create/update/delete and type constants studio/player/all | ✓ verified | Class:src/main/java/com/funifier/engine/audit/Audit.java:Audit |
+| AuditManager.log only writes an AuditLog when an active Audit matches entity+event and the config type matches the operation origin | ✓ verified | Class:src/main/java/com/funifier/engine/audit/AuditManager.java:AuditManager |
+| clearExpiredLogs purges audit_log entries older than each config's clean retention and is invoked from AsyncProcessor | ✓ verified | Method:src/main/java/com/funifier/engine/audit/AuditManager.java:AuditManager.clearExpiredLogs#0 |

package/skills/funifier/references/create-challenge.md

@@ -114,3 +114,10 @@ funifier_get type=challenge id=<_id>
 ```
 
 Não use `funifier_logs` — isso é só para triggers e schedulers.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| Challenge is the core entity class storing action rules and reward configuration in funifier-service | ✓ verified | Class:src/main/java/com/funifier/engine/challenge/Challenge.java:Challenge |
+| ChallengeManager manages challenge lifecycle including progress checking and achievement dispatch | ✓ verified | Class:src/main/java/com/funifier/engine/challenge/ChallengeManager.java:ChallengeManager |

package/skills/funifier/references/create-competition.md

@@ -96,3 +96,10 @@ POST /v3/competition/join   { "competition": "<_id>", "player": "<player_id>" }
 POST /v3/competition/leader/aggregate?id=<_id>
 GET /v3/competition/<_id>/execute   (manual execution only)
 ```
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| Competition is the entity class for timed ranking contests with enrollment and position-based rewards in funifier-service | ✓ verified | Class:src/main/java/com/funifier/engine/competition/Competition.java:Competition |
+| CompetitionManager manages competition execution, ranking computation, and reward distribution in funifier-service | ✓ verified | Class:src/main/java/com/funifier/engine/competition/CompetitionManager.java:CompetitionManager |

package/skills/funifier/references/create-crossword.md

@@ -572,3 +572,9 @@ funifier_list type=crossword search=<titulo>
 ```
 
 Teste o jogo no Studio e verifique que as dicas e palavras estão corretas.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| Crossword is the entity class for word puzzle games with title, words, and clue positions in funifier-service | ✓ verified | Class:src/main/java/com/funifier/engine/crossword/Crossword.java:Crossword |

package/skills/funifier/references/create-custom-object.md

@@ -89,3 +89,9 @@ DELETE /v3/database/car__c?q=_id:'car001'
 ### 7. Usar em triggers
 
 Para executar trigger em eventos da coleção, use `entity: "car__c"` no payload do trigger.
+
+## Verified References
+
+| Claim | Status | Evidence |
+|-------|--------|----------|
+| DatabaseManager provides MongoDB connection for custom __c collection CRUD operations in funifier-service | ✓ verified | Class:src/main/java/com/funifier/engine/database/DatabaseManager.java:DatabaseManager |