sipgate-mcp 0.5.1 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,91 @@
 # Changelog
 
+## 0.6.0 - 2026-09-25
+
+Breaking: 18 tools are renamed so that every tool name fits the 28-character
+limit sipgate's AI agent sona applies to connected MCP tools. Backend method
+names and behaviour are unchanged; update client allowlists and saved prompts.
+
+| Before (0.5.x) | Since 0.6.0 |
+| --- | --- |
+| `set_external_device_target_number` | `set_external_device_target` |
+| `set_external_device_incoming_call_display` | `set_external_device_display` |
+| `get_device_tariff_announcement` | `get_tariff_announcement` |
+| `set_device_tariff_announcement` | `set_tariff_announcement` |
+| `get_device_single_row_display` | `get_single_row_display` |
+| `set_device_single_row_display` | `set_single_row_display` |
+| `get_phoneline_block_anonymous` | `get_anonymous_call_blocking` |
+| `set_phoneline_block_anonymous` | `set_anonymous_call_blocking` |
+| `create_autorecording_greeting` | `create_recording_greeting` |
+| `delete_autorecording_greeting` | `delete_recording_greeting` |
+| `create_call_email_notification` | `create_call_email_alert` |
+| `create_call_sms_notification` | `create_call_sms_alert` |
+| `create_fax_email_notification` | `create_fax_email_alert` |
+| `create_fax_sms_notification` | `create_fax_sms_alert` |
+| `create_fax_report_notification` | `create_fax_report_alert` |
+| `create_sms_email_notification` | `create_sms_email_alert` |
+| `create_voicemail_email_notification` | `create_voicemail_email_alert` |
+| `create_voicemail_sms_notification` | `create_voicemail_sms_alert` |
+
+- Make `user_id` optional in user scope. It defaults to the authenticated user
+  before anything is delegated, so an agent no longer has to look up its own ID
+  first; 49 tools, including `send_sms`, previously required it. An explicit
+  foreign ID is still rejected, and account scope still requires the ID.
+- Add `list_phonelines`. Nine tools need a `phoneline_id`, and the backend
+  already implemented the listing, but no tool exposed it.
+- Report a write that sipgate accepted as applied when a later step of the same
+  tool call fails. Reading the result back after a successful `send_sms`,
+  Click2Dial, call control, or any other write used to surface as a plain,
+  retryable error, which invited a second SMS or call. The result now says
+  `applied: true`, lists the accepted requests with any session or call ID, and
+  says not to repeat the action. A later failed write names the requests that
+  were already accepted.
+- Advertise fields with defaults as optional in the tool schemas. `offset` and
+  `limit` of `list_numbers`, `call_history`, `export_history`, `list_contacts`,
+  and `get_contacts_vcard` were listed as required.
+- Bound every request: each attempt has a 30-second deadline that covers the
+  response headers and the body. A write that times out, loses the connection,
+  or gets a server error is reported as possibly applied, so an agent checks
+  the state instead of sending it again. A write whose confirmation body is not
+  JSON is treated as accepted.
+- Retry a read once when sipgate answers HTTP 429 or 503, honouring
+  `Retry-After` (seconds or HTTP date) up to 5 seconds. Longer waits are
+  reported instead of blocking the tool call, and writes are never retried.
+- Stop passing sipgate's error text into tool results. Only denial sentences
+  sipgate is known to send are shown, quoted from a built-in list; any other
+  body is dropped. Before, any short plain-text body passed, including one that
+  echoed the raw PAT or read like an instruction. `Retry-After` is parsed and
+  no longer echoed, and every error message is scrubbed of the configured
+  PAT-ID, PAT, and Basic credential.
+- Read paginated results through one bounded helper. It follows the
+  `nextOffset` of filtered history pages, so bulk history deletion on accounts
+  without history extensions no longer stops after the first page and leaves
+  owned entries behind. Offsets advance by what sipgate returned, a
+  continuation that does not move forward is an error, and a misbehaving
+  endpoint stops after 100 pages. `call_history` no longer invents a total when
+  sipgate omits it, and reports a next offset after a full page.
+- Bound the contact cursor used by bulk contact deletion and CSV import, and
+  refuse a cursor that repeats instead of truncating the snapshot silently.
+- Require `limit >= 1` for `export_history`, matching `call_history`.
+- Describe where `faxline_id` and `phoneline_id` values come from, and link the
+  alert tools to `list_notifications` and `delete_notification`.
+- Correct the README's error-handling claims, list npm first in the setup
+  skill, and sync `package-lock.json`, which still said 0.5.1.
+- Add HTTP-level tests for `account_info`, `list_users`, `list_numbers`,
+  `list_devices`, `call_history`, and account-scope Click2Dial, plus tests that
+  keep every tool name unique and at most 28 characters long.
+
+## 0.5.2 - 2026-08-30
+
+- Never send device IDs as history connection filters. sipgate answers HTTP 403
+  for them and accepts only real extensions, so `call_history` failed on every
+  account whose user owns devices but no phoneline. Accounts with no filterable
+  extension now read the history unfiltered and keep the entries that match the
+  user's own numbers.
+- Pass through sipgate's own plain-text denial reason. The phoneline endpoints
+  answer "This endpoint requires a sipgate Classic PBX Account", which is worth
+  more than any guess about token scopes. Structured bodies are still withheld.
+
 ## 0.5.1 - 2026-08-30
 
 - List user numbers from sipgate's own user-number endpoint instead of matching

package/README.md

@@ -109,7 +109,7 @@ addition to sipgate's own user role and PAT scopes:
 
 | Value | Behavior |
 | --- | --- |
-| `user` (default) | Resolves the authenticated user through `/authorization/userinfo`; returns only that user and their assigned numbers, notifications, faxlines, phonelines, voicemails, greetings, and attached devices; forces user-specific device, routing, restriction, and settings reads; constrains history reads, exports, and mutations to owned connections/entries; and validates every write target against owned numbers, phonelines, nested voicemail/forwarding/greeting resources, devices, faxlines, notifications, or emergency addresses associated with an owned device/number. Account-wide contact, blacklist, porting-cancellation, and sipgate.io writes require `confirm_account_wide: true`; their reads are allowed and clearly labelled account-wide. |
+| `user` (default) | Resolves the authenticated user through `/authorization/userinfo`; returns only that user and their assigned numbers, notifications, faxlines, phonelines, voicemails, greetings, and attached devices; forces user-specific device, routing, restriction, and settings reads; constrains history reads, exports, and mutations to owned connections/entries; and validates every write target against owned numbers, phonelines, nested voicemail/forwarding/greeting resources, devices, faxlines, notifications, or emergency addresses associated with an owned device/number. Account-wide contact, blacklist, porting-cancellation, and sipgate.io writes require `confirm_account_wide: true`; their reads are allowed and clearly labelled account-wide. Every `user_id` parameter is optional and defaults to the authenticated user; another user's ID is rejected. |
 | `account` | Enables account-wide reads and writes. Startup fails unless `/users/{authenticatedUserId}` reports `admin: true`. Requires `users:read` for the administrator check. |
 
 Token scopes are permission ceilings, not role elevation. For example,
@@ -141,8 +141,8 @@ listed specific and parent scopes offered by the PAT UI when in doubt.
 | `get_device` | Read | Ownership `GET /{self}/devices`, then `GET /devices/{deviceId}` | `devices:read` |
 | `get_device_caller_id` | Read | Device ownership read, then `GET /devices/{deviceId}/callerid` | `devices:read`, `devices:callerid:read` |
 | `get_device_local_prefix` | Read | Device ownership read, then `GET /devices/{deviceId}/localprefix` | `devices:read`, `devices:localprefix:read` |
-| `get_device_tariff_announcement` | Read | Device ownership read, then `GET /devices/{deviceId}/tariffannouncement` | `devices:read`, `devices:tariffannouncement:read` |
-| `get_device_single_row_display` | Read | Device ownership read, then `GET /devices/{deviceId}/singlerowdisplay` | `devices:read`, `devices:singlerowdisplay:read` |
+| `get_tariff_announcement` | Read | Device ownership read, then `GET /devices/{deviceId}/tariffannouncement` | `devices:read`, `devices:tariffannouncement:read` |
+| `get_single_row_display` | Read | Device ownership read, then `GET /devices/{deviceId}/singlerowdisplay` | `devices:read`, `devices:singlerowdisplay:read` |
 | `get_device_contingents` | Read | Device/user ownership reads, then `GET /{userId}/devices/{deviceId}/contingents` | `devices:read` |
 | `list_user_numbers` | Read | `GET /{userId}/numbers`; this direct endpoint never uses phonelines | `numbers:read` |
 | `validate_quick_dial` | Read | `GET /numbers/quickdial/validation/{quickDialNumber}` | `numbers:read` |
@@ -155,8 +155,9 @@ listed specific and parent scopes offered by the PAT UI when in doubt.
 | `list_notifications` | Read | `GET /{userId}/notifications` | `notifications:read` |
 | `list_faxlines` | Read | `GET /{userId}/faxlines` | `faxlines:read` |
 | `list_faxline_numbers` | Read | User: faxline ownership read, then `GET /{userId}/faxlines/{faxlineId}/numbers`; account: direct `GET` | `faxlines:read`, `faxlines:numbers:read` |
+| `list_phonelines` | Read | `GET /{userId}/phonelines`; an account without a phoneline layer returns an empty list with `phonelinesAvailable: false` | `phonelines:read` |
 | `get_phoneline` | Read | Owned-phoneline lookup, then `GET /{userId}/phonelines/{phonelineId}` | `phonelines:read` |
-| `get_phoneline_block_anonymous` | Read | Owned-phoneline lookup, then `GET /{userId}/phonelines/{phonelineId}/blockanonymous` | `phonelines:read`, `phonelines:blockanonymous:read` |
+| `get_anonymous_call_blocking` | Read | Owned-phoneline lookup, then `GET /{userId}/phonelines/{phonelineId}/blockanonymous` | `phonelines:read`, `phonelines:blockanonymous:read` |
 | `list_phoneline_devices` | Read | Owned-phoneline/device filtering, then `GET /{userId}/phonelines/{phonelineId}/devices` | `phonelines:read`, `phonelines:devices:read`; user filtering also needs `devices:read` |
 | `list_parallel_forwardings` | Read | Owned-phoneline lookup, then `GET /{userId}/phonelines/{phonelineId}/parallelforwardings` | `phonelines:read`, `phonelines:parallelforwardings:read` |
 | `list_phoneline_voicemails` | Read | Owned-phoneline lookup, then `GET /{userId}/phonelines/{phonelineId}/voicemails` | `phonelines:read`, `phonelines:voicemails:read` |
@@ -169,7 +170,7 @@ listed specific and parent scopes offered by the PAT UI when in doubt.
 | `create_phoneline` | Write/action | `POST /{userId}/phonelines`; 403/404 becomes a clean unavailable result | `phonelines:write` |
 | `update_phoneline_alias` | Write | Owned-phoneline before/after reads and `PUT /{userId}/phonelines/{phonelineId}` | `phonelines:read`, `phonelines:write` |
 | `delete_phoneline` | Write | Owned-phoneline before-state read and `DELETE /{userId}/phonelines/{phonelineId}` | `phonelines:read`, `phonelines:write` |
-| `set_phoneline_block_anonymous` | Write | Owned-phoneline setting reads and `PUT /{userId}/phonelines/{phonelineId}/blockanonymous` | `phonelines:read`, `phonelines:blockanonymous:read`, `phonelines:blockanonymous:write` |
+| `set_anonymous_call_blocking` | Write | Owned-phoneline setting reads and `PUT /{userId}/phonelines/{phonelineId}/blockanonymous` | `phonelines:read`, `phonelines:blockanonymous:read`, `phonelines:blockanonymous:write` |
 | `attach_device_to_phoneline` | Write/action | Owned phoneline/device reads, pre/post assignment reads, and `POST /{userId}/phonelines/{phonelineId}/devices` | `phonelines:read`, `phonelines:devices:read`, `phonelines:devices:write`, `devices:read` |
 | `detach_device_from_phoneline` | Write | Owned phoneline/device reads, pre/post assignment reads, and `DELETE /{userId}/phonelines/{phonelineId}/devices/{deviceId}` | `phonelines:read`, `phonelines:devices:read`, `phonelines:devices:write`, `devices:read` |
 | `create_parallel_forwarding` | Write/action | Owned-phoneline check, pre/post forwarding reads, and `POST /{userId}/phonelines/{phonelineId}/parallelforwardings` | `phonelines:read`, `phonelines:write`, `phonelines:parallelforwardings:read`, `phonelines:parallelforwardings:write` |
@@ -182,8 +183,8 @@ listed specific and parent scopes offered by the PAT UI when in doubt.
 | `set_voicemail_transcription` | Write | Verify owned voicemail, pre/post voicemail reads, and `PUT /{userId}/phonelines/{phonelineId}/voicemails/{voicemailId}/transcriptions` | `phonelines:read`, `phonelines:write`, `phonelines:voicemails:read`, `phonelines:voicemails:write` |
 | `play_voicemail` | Write/action | User: verify owned device and history/data entry; then `POST /sessions/voicemail/play` | `sessions:write`, `sessions:calls:write`; user ownership also needs `devices:read`, `history:read` and owned-connection scopes |
 | `record_voicemail_greeting` | Write/action | User: verify owned device and target voicemail; then `POST /sessions/voicemail/recording` | `sessions:write`, `sessions:calls:write`; user ownership also needs `devices:read`, `phonelines:read`, `phonelines:voicemails:read` |
-| `create_autorecording_greeting` | Write/action | Account scope only: pre/post `GET /autorecordings/greetings`, `POST /autorecordings/greetings` | `autorecording:greeting:read`, `autorecording:greeting:write`; sipgate requires administrator privileges and activated call recording |
-| `delete_autorecording_greeting` | Write | Account scope only: before-state read, then `DELETE /autorecordings/greetings/{greetingId}` | `autorecording:greeting:read`, `autorecording:greeting:write`; sipgate requires administrator privileges and activated call recording |
+| `create_recording_greeting` | Write/action | Account scope only: pre/post `GET /autorecordings/greetings`, `POST /autorecordings/greetings` | `autorecording:greeting:read`, `autorecording:greeting:write`; sipgate requires administrator privileges and activated call recording |
+| `delete_recording_greeting` | Write | Account scope only: before-state read, then `DELETE /autorecordings/greetings/{greetingId}` | `autorecording:greeting:read`, `autorecording:greeting:write`; sipgate requires administrator privileges and activated call recording |
 | `set_autorecording_settings` | Write | Owned phoneline/faxline extension lookup, pre/post setting reads, and `PUT /autorecordings/{extension}/settings` | `devices:read`; ownership also needs `phonelines:read`, `faxlines:read` |
 | `create_faxline` | Write/action | `POST /{userId}/faxlines` | `faxlines:write` |
 | `update_faxline_alias` | Write | Owned-faxline pre/post list reads and `PUT /{userId}/faxlines/{faxlineId}` | `faxlines:read`, `faxlines:write` |
@@ -231,10 +232,10 @@ listed specific and parent scopes offered by the PAT UI when in doubt.
 | `set_device_alias` | Write | Device ownership read; pre/post device reads and `PUT /devices/{deviceId}/alias` | `devices:read`, `devices:write` |
 | `set_device_caller_id` | Write | Device and caller-number ownership reads; pre/post caller-ID reads and `PUT /devices/{deviceId}/callerid` | `devices:read`, `devices:write`, `devices:callerid:read`, `devices:callerid:write`, plus owned-number read scopes |
 | `set_device_local_prefix` | Write | Device ownership read; pre/post setting reads and `PUT /devices/{deviceId}/localprefix` | `devices:read`, `devices:write`, `devices:localprefix:read`, `devices:localprefix:write` |
-| `set_device_tariff_announcement` | Write | Device ownership read; pre/post setting reads and `PUT /devices/{deviceId}/tariffannouncement` | `devices:read`, `devices:write`, `devices:tariffannouncement:read`, `devices:tariffannouncement:write` |
-| `set_device_single_row_display` | Write | Device ownership read; pre/post setting reads and `PUT /devices/{deviceId}/singlerowdisplay` | `devices:read`, `devices:write`, `devices:singlerowdisplay:read`, `devices:singlerowdisplay:write` |
-| `set_external_device_target_number` | Write | Device ownership read; pre/post device reads and `PUT /devices/{deviceId}/external/targetnumber` | `devices:read`, `devices:write` |
-| `set_external_device_incoming_call_display` | Write | Device ownership read; pre/post device reads and `PUT /devices/{deviceId}/external/incomingcalldisplay` | `devices:read`, `devices:write` |
+| `set_tariff_announcement` | Write | Device ownership read; pre/post setting reads and `PUT /devices/{deviceId}/tariffannouncement` | `devices:read`, `devices:write`, `devices:tariffannouncement:read`, `devices:tariffannouncement:write` |
+| `set_single_row_display` | Write | Device ownership read; pre/post setting reads and `PUT /devices/{deviceId}/singlerowdisplay` | `devices:read`, `devices:write`, `devices:singlerowdisplay:read`, `devices:singlerowdisplay:write` |
+| `set_external_device_target` | Write | Device ownership read; pre/post device reads and `PUT /devices/{deviceId}/external/targetnumber` | `devices:read`, `devices:write` |
+| `set_external_device_display` | Write | Device ownership read; pre/post device reads and `PUT /devices/{deviceId}/external/incomingcalldisplay` | `devices:read`, `devices:write` |
 | `change_device_password` | Write/action | Device ownership/before-state reads, then `POST /devices/{deviceId}/credentials/password`; the response is redacted | `devices:read`, `devices:write` |
 | `create_register_device` | Write/action | `POST /{userId}/devices/register` | `devices:write` |
 | `create_mobile_device` | Write/action | `POST /{userId}/devices/mobile` | `devices:write` |
@@ -245,14 +246,14 @@ listed specific and parent scopes offered by the PAT UI when in doubt.
 | `update_address` | Write | Address ownership and pre/post address reads, then `PUT /addresses/{addressId}` | `addresses:read`, `addresses:write`, plus user ownership read scopes |
 | `send_sms` | Write/action | `GET /{userId}/sms`, pre/post `GET /history`, `POST /sessions/sms` | `sms:read`, `history:read`, `sessions:write`, `sessions:sms:write` |
 | `initiate_call` | Write/action | User: device/number ownership reads, then `POST /sessions/calls`; account: pre/post `GET /calls` plus `POST` | `sessions:write`, `sessions:calls:write`; user also needs `devices:read`, `phonelines:read`, `phonelines:numbers:read`; account needs `rtcm:read` |
-| `create_call_email_notification` | Write/action | User: endpoint ownership reads; all modes: pre/post `GET /{userId}/notifications`, `POST /{userId}/notifications/call/email` | `notifications:read`, `notifications:write`; user also needs `devices:read` or `phonelines:read` |
-| `create_call_sms_notification` | Write/action | User: endpoint ownership reads; all modes: pre/post notification reads, `POST /{userId}/notifications/call/sms` | `notifications:read`, `notifications:write`; user also needs `devices:read` or `phonelines:read` |
-| `create_fax_email_notification` | Write/action | User: faxline ownership read; all modes: pre/post notification reads, `POST /{userId}/notifications/fax/email` | `notifications:read`, `notifications:write`; user also needs `faxlines:read` |
-| `create_fax_sms_notification` | Write/action | User: faxline ownership read; all modes: pre/post notification reads, `POST /{userId}/notifications/fax/sms` | `notifications:read`, `notifications:write`; user also needs `faxlines:read` |
-| `create_fax_report_notification` | Write/action | User: faxline ownership read; all modes: pre/post notification reads, `POST /{userId}/notifications/fax/report` | `notifications:read`, `notifications:write`; user also needs `faxlines:read` |
-| `create_sms_email_notification` | Write/action | Pre/post notification reads, `POST /{userId}/notifications/sms/email` | `notifications:read`, `notifications:write` |
-| `create_voicemail_email_notification` | Write/action | Pre/post notification reads, `POST /{userId}/notifications/voicemail/email` | `notifications:read`, `notifications:write` |
-| `create_voicemail_sms_notification` | Write/action | Pre/post notification reads, `POST /{userId}/notifications/voicemail/sms` | `notifications:read`, `notifications:write` |
+| `create_call_email_alert` | Write/action | User: endpoint ownership reads; all modes: pre/post `GET /{userId}/notifications`, `POST /{userId}/notifications/call/email` | `notifications:read`, `notifications:write`; user also needs `devices:read` or `phonelines:read` |
+| `create_call_sms_alert` | Write/action | User: endpoint ownership reads; all modes: pre/post notification reads, `POST /{userId}/notifications/call/sms` | `notifications:read`, `notifications:write`; user also needs `devices:read` or `phonelines:read` |
+| `create_fax_email_alert` | Write/action | User: faxline ownership read; all modes: pre/post notification reads, `POST /{userId}/notifications/fax/email` | `notifications:read`, `notifications:write`; user also needs `faxlines:read` |
+| `create_fax_sms_alert` | Write/action | User: faxline ownership read; all modes: pre/post notification reads, `POST /{userId}/notifications/fax/sms` | `notifications:read`, `notifications:write`; user also needs `faxlines:read` |
+| `create_fax_report_alert` | Write/action | User: faxline ownership read; all modes: pre/post notification reads, `POST /{userId}/notifications/fax/report` | `notifications:read`, `notifications:write`; user also needs `faxlines:read` |
+| `create_sms_email_alert` | Write/action | Pre/post notification reads, `POST /{userId}/notifications/sms/email` | `notifications:read`, `notifications:write` |
+| `create_voicemail_email_alert` | Write/action | Pre/post notification reads, `POST /{userId}/notifications/voicemail/email` | `notifications:read`, `notifications:write` |
+| `create_voicemail_sms_alert` | Write/action | Pre/post notification reads, `POST /{userId}/notifications/voicemail/sms` | `notifications:read`, `notifications:write` |
 | `delete_notification` | Write | User: verify the nested ID in `GET /{userId}/notifications`; all modes: before/after notification reads and `DELETE /{userId}/notifications/{notificationId}` | `notifications:read`, `notifications:write` |
 | `hangup_call` | Write | User: participant ownership read; all modes: before/after `GET /calls`, `DELETE /calls/{callId}` | `rtcm:read`, `rtcm:write`; user also needs owned-device/number read scopes |
 | `set_call_hold` | Write | User: participant ownership read; before/after `GET /calls`, `PUT /calls/{callId}/hold` | `rtcm:read`, `rtcm:write`; user also needs owned-device/number read scopes |
@@ -294,7 +295,7 @@ Every write tool returns a JSON object with `before` and `after`. Where a resour
 
 ## Read-only mode
 
-Set `SIPGATE_MCP_READONLY=1` to register only the 47 read tools. Write tools are absent from `tools/list`, rather than merely failing when called.
+Set `SIPGATE_MCP_READONLY=1` to register only the 48 read tools. Write tools are absent from `tools/list`, rather than merely failing when called.
 
 ```bash
 export SIPGATE_MCP_READONLY=1
@@ -408,7 +409,10 @@ MCP stdio server
   confirmation where documented above.
 - Account scope fails startup unless the authenticated sipgate user reports `admin: true`.
 - The Basic Auth header exists only in memory and is sent only to the fixed sipgate API base URL.
-- API error bodies are discarded. User-facing errors never include request headers, response bodies, or credentials.
+- API error bodies are not passed on. The single exception is a denial sentence that sipgate is known to send, such as "This endpoint requires a sipgate Classic PBX Account": it is recognised by exact match and quoted from a built-in list, never from the response. `Retry-After` is parsed and never echoed. Every error message has the configured PAT-ID, PAT, and Basic credential replaced by `[REDACTED]`, and request headers never appear in errors.
+- Every request attempt has a 30-second deadline covering headers and body (a retried read can take about 65 seconds in total). A read that sipgate throttles (HTTP 429/503) is retried once after at most 5 seconds; writes are never retried automatically, and a write that times out or loses the connection is reported as possibly applied so the caller checks the state before trying again.
+- Paginated reads follow sipgate's offsets up to 100 pages of 1000 entries (contacts: 100 cursor pages) and then stop with an error instead of looping. A continuation that does not move forward is an error, not a silent end.
+- When a tool fails after sipgate has already accepted one of its writes, the result says `applied: true`, lists the accepted requests with any session or call ID, and tells the agent not to repeat the action. Only a failure before any write is reported as a plain error.
 - Potentially sensitive response properties such as `credentials`, `password`, `token`, and `secret` are redacted before tool output.
 - The server writes no application logs to stdout; stdout is reserved for MCP stdio frames.
 - `.env*`, fetched research data, build output, and package tarballs are ignored by Git.

package/SKILL.md

@@ -2,7 +2,7 @@
 name: sipgate-mcp
 description: Install and securely configure the sipgate MCP server when a user asks to set up or connect a sipgate account to Codex or Claude. Do not use for ordinary sipgate product questions.
 metadata:
-  version: "0.5.1"
+  version: "0.6.0"
 ---
 
 # Set up sipgate MCP
@@ -10,19 +10,19 @@ metadata:
 Install the matching CLI version with one available package manager:
 
 ```bash
-vp install -g sipgate-mcp@0.5.1
+npm install -g sipgate-mcp@0.6.0
 ```
 
 ```bash
-npm install -g sipgate-mcp@0.5.1
+pnpm add -g sipgate-mcp@0.6.0
 ```
 
 ```bash
-pnpm add -g sipgate-mcp@0.5.1
+vp install -g sipgate-mcp@0.6.0
 ```
 
 Run only one install command. Confirm that `sipgate-mcp --version` reports
-`0.5.1` before continuing.
+`0.6.0` before continuing.
 
 ## Security boundary
 
@@ -86,7 +86,7 @@ user-scoped stdio server. Its interactive prompt asks whether write tools should
 be enabled; do not answer that choice on the user's behalf. The client starts
 and stops that process, so do not launch `sipgate-mcp` as a daemon.
 
-Version 0.5.1 adds user-scoped device, quick-dial, user-number, emergency-
+The server covers user-scoped device, quick-dial, user-number, emergency-
 address, notification, live-call-control, phoneline, voicemail/greeting,
 automated-recording, fax, contact, blacklist, restriction, history-management,
 porting, balance, and sipgate.io self-service. It supports accounts without
@@ -103,6 +103,11 @@ sessions, recording, and other writes may incur charges or carry legal
 consequences, and address changes can deactivate associated numbers depending
 on country.
 
+When upgrading from 0.5.x: version 0.6.0 renamed 18 tools so that every name
+fits sipgate's 28-character limit for connected MCP tools (see the CHANGELOG
+table). Existing registrations keep working, but client permission allowlists
+or saved prompts that name an old tool must be updated.
+
 When credentials already exist in Keychain, setup reuses them without another
 prompt. Use `--replace-credentials` only when the user explicitly wants to
 rotate or replace the stored PAT-ID and PAT.

package/dist/backend/access-controlled-backend.d.ts

@@ -57,6 +57,7 @@ export declare class AccessControlledBackend implements TelephonyBackend {
     listFaxlines(userId: string): Promise<JsonValue>;
     listFaxlineNumbers(userId: string, faxlineId: string): Promise<JsonValue>;
     getFaxlineCallerId(userId: string, faxlineId: string): Promise<JsonValue>;
+    listSmsExtensions(userId: string): Promise<JsonValue>;
     getHistoryEntry(entryId: string): Promise<JsonValue>;
     getSettings(userId?: string): Promise<JsonValue>;
     getBalance(): Promise<JsonValue>;
@@ -179,6 +180,9 @@ export declare class AccessControlledBackend implements TelephonyBackend {
     private assertOwnedFaxline;
     private assertOwnedCall;
     private isOwnedCall;
+    private isOwnedHistoryEntry;
+    private ownedSmsExtensionIds;
+    private ownedHistoryConnectionIds;
     private ownedPhonelineIds;
     private ownedPhonelineState;
     private assertOwnedPhoneline;

package/dist/backend/access-controlled-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-controlled-backend.d.ts","sourceRoot":"","sources":["../../src/backend/access-controlled-backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EACX,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EAEZ,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,+BAA+B,EAC/B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAmB,OAAO,EAAE,MAAM,EAGjC;CACF;AA6FD;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAE5D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,YACmB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,wBAAwB,EAChD;IAEG,oBAAoB,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAE/D;IAEY,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGvD;IAEY,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAQhD;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAI3C;IAEY,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAG/E;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtF;IAEM,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxD;IAEM,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxD;IAEY,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAMjF;IAEY,0BAA0B,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,oBAAoB,CAC/B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAuBpB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,sBAAsB,CACjC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAYhD;IAEY,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAKjE;IAEM,0BAA0B,IAAI,OAAO,CAAC,SAAS,CAAC,CAOtD;IAEY,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3E;IAEM,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAI5E;IAEY,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3D;IAEY,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGnE;IAEY,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtE;IAEY,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG7E;IAEY,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3E;IAEY,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAMtF;IAEY,aAAa,IAAI,OAAO,CAAC,SAAS,CAAC,CAqB/C;IAEY,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG7D;IAEY,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAUrE;IAEM,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAE1E;IAEM,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAE3D;IAEM,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvD;IAEM,oBAAoB,IAAI,OAAO,CAAC,SAAS,CAAC,CAEhD;IAEM,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAEnE;IAEM,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAErE;IAEM,qBAAqB,IAAI,OAAO,CAAC,SAAS,CAAC,CAEjD;IAEM,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAMjE;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAGlF;IAEM,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrD;IAEY,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBnE;IAEY,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAkBxE;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAiB3C;IAEM,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3D;IAEM,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtD;IAEY,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrF;IAEY,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrF;IAEY,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGhE;IAEM,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAItD;IAEM,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC,CAEtC;IAEM,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAExC;IAEM,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvD;IAEM,oBAAoB,IAAI,OAAO,CAAC,SAAS,CAAC,CAEhD;IAEM,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,CAE3C;IAEM,aAAa,CAClB,KAAK,EAAE,YAAY,EACnB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kBAAkB,EACzB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,EAAE,EACvB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,cAAc,CACnB,KAAK,EAAE,mBAAmB,EAC1B,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,iBAAiB,CACtB,aAAa,EAAE,MAAM,EACrB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,gBAAgB,CACrB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,0BAA0B,EAAE,EAClC,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,oBAAoB,CACzB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,OAAO,EACjB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,uBAAuB,CAC5B,WAAW,EAAE,MAAM,EACnB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAEzF;IAEY,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrF;IAEY,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGlF;IAEY,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGxF;IAEY,kBAAkB,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGxE;IAEY,oBAAoB,CAC/B,MAAM,EAAE,2BAA2B,EAAE,GACpC,OAAO,CAAC,cAAc,CAAC,CAKzB;IAEY,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAkB9E;IAEM,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEM,uBAAuB,CAC5B,KAAK,EAAE,sBAAsB,EAC7B,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAqB3F;IAEM,oBAAoB,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,cAAc,EAAE,GAC5B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG9D;IAEY,oBAAoB,CAC/B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,0BAA0B,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,yBAAyB,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,wBAAwB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,wBAAwB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,EAC5B,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAYzB;IAEY,wBAAwB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAazB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAYzB;IAEY,yBAAyB,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,aAAa,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,cAAc,CAAC,CAWjF;IAEY,uBAAuB,CAClC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAWzB;IAEM,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAOtF;IAEY,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAOpF;IAEY,wBAAwB,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG5D;IAEY,kBAAkB,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAIrF;IAEY,kBAAkB,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,iBAAiB,CAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAG/E;IAEY,YAAY,CACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAQzB;IAEY,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnE;IAEY,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrF;IAEY,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAQxF;IAEY,oBAAoB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,2BAA2B,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,yBAAyB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,6BAA6B,CACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,oCAAoC,CAC/C,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,eAAe,GAAG,eAAe,GACrD,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG3E;IAEM,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnF;IAEM,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjF;IAEM,oBAAoB,CACzB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrE;IAEY,eAAe,CAC1B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAKtE;IAEY,aAAa,CACxB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,OAAO,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;IAEY,YAAY,CAAC,KAAK,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0B1B;IAEM,gBAAgB,CAAC,KAAK,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;IAEY,2BAA2B,CACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,yBAAyB,CACpC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,0BAA0B,CACrC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,wBAAwB,CACnC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,2BAA2B,CACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEM,0BAA0B,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG3F;IAEY,gCAAgC,CAC3C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,8BAA8B,CACzC,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,kBAAkB,CAC7B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,cAAc,CAAC,CAczB;IAEY,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG/D;IAEY,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGhF;IAEY,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjF;IAEY,gBAAgB,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,YAAY,CACvB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,cAAc,CAAC,CAQzB;IAEY,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnF;IAEY,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGvF;IAEY,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjE;IAEY,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAWrE;IAED;;;;OAIG;YACW,uBAAuB;IAsBrC,OAAO,CAAC,6BAA6B;YAUvB,oBAAoB;IAgClC,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,WAAW;YAOL,kBAAkB;YAQlB,uBAAuB;YAWvB,kBAAkB;YAWlB,eAAe;IAoB7B,OAAO,CAAC,WAAW;YAiBL,iBAAiB;YAIjB,mBAAmB;YAUnB,oBAAoB;YAcpB,6BAA6B;YAwB7B,oBAAoB;YAwBpB,mBAAmB;YAsBnB,sBAAsB;YAOtB,mBAAmB;YA0BnB,eAAe;YAOf,iCAAiC;YAsBjC,cAAc;YASd,iBAAiB;YAWjB,mBAAmB;YAWnB,sBAAsB;YAWtB,kBAAkB;YAWlB,cAAc;YAId,kBAAkB;IA8ChC,OAAO,CAAC,aAAa;IAOrB;;;OAGG;YACW,6BAA6B;YAa7B,YAAY;CA2B3B;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAWlC"}
+{"version":3,"file":"access-controlled-backend.d.ts","sourceRoot":"","sources":["../../src/backend/access-controlled-backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EACX,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EAEZ,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,+BAA+B,EAC/B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,wBAAwB,CAAC;AAGhC,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAmB,OAAO,EAAE,MAAM,EAGjC;CACF;AA6FD;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAE5D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,YACmB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,wBAAwB,EAChD;IAEG,oBAAoB,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAE/D;IAEY,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGvD;IAEY,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAQhD;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAI3C;IAEY,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAG/E;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtF;IAEM,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxD;IAEM,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxD;IAEY,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAMjF;IAEY,0BAA0B,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,oBAAoB,CAC/B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAuBpB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,sBAAsB,CACjC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAEY,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAYhD;IAEY,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAKjE;IAEM,0BAA0B,IAAI,OAAO,CAAC,SAAS,CAAC,CAOtD;IAEY,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3E;IAEM,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAI5E;IAEY,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3D;IAEY,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGnE;IAEY,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtE;IAEY,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG7E;IAEY,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3E;IAEY,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAMtF;IAEY,aAAa,IAAI,OAAO,CAAC,SAAS,CAAC,CAqB/C;IAEY,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG7D;IAEY,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAUrE;IAEM,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAE1E;IAEM,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAE3D;IAEM,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvD;IAEM,oBAAoB,IAAI,OAAO,CAAC,SAAS,CAAC,CAEhD;IAEM,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAEnE;IAEM,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAErE;IAEM,qBAAqB,IAAI,OAAO,CAAC,SAAS,CAAC,CAEjD;IAEM,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAMjE;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAGlF;IAEM,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrD;IAEY,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CA4BnE;IAEY,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAkBxE;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAiB3C;IAEM,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3D;IAEM,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtD;IAEY,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrF;IAEY,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrF;IAEM,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG3D;IAEY,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGhE;IAEM,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAItD;IAEM,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC,CAEtC;IAEM,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAExC;IAEM,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEvD;IAEM,oBAAoB,IAAI,OAAO,CAAC,SAAS,CAAC,CAEhD;IAEM,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,CAE3C;IAEM,aAAa,CAClB,KAAK,EAAE,YAAY,EACnB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kBAAkB,EACzB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,EAAE,EACvB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,cAAc,CACnB,KAAK,EAAE,mBAAmB,EAC1B,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,iBAAiB,CACtB,aAAa,EAAE,MAAM,EACrB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,gBAAgB,CACrB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,0BAA0B,EAAE,EAClC,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,oBAAoB,CACzB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,OAAO,EACjB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,uBAAuB,CAC5B,WAAW,EAAE,MAAM,EACnB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAEzF;IAEY,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrF;IAEY,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGlF;IAEY,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGxF;IAEY,kBAAkB,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGxE;IAEY,oBAAoB,CAC/B,MAAM,EAAE,2BAA2B,EAAE,GACpC,OAAO,CAAC,cAAc,CAAC,CAKzB;IAEY,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAkB9E;IAEM,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEM,uBAAuB,CAC5B,KAAK,EAAE,sBAAsB,EAC7B,kBAAkB,CAAC,EAAE,OAAO,GAC3B,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAqB3F;IAEM,oBAAoB,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,cAAc,EAAE,GAC5B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG9D;IAEY,oBAAoB,CAC/B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,0BAA0B,CACrC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,yBAAyB,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,wBAAwB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,wBAAwB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,EAC5B,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAYzB;IAEY,wBAAwB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAazB;IAEY,uBAAuB,CAClC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAYzB;IAEY,yBAAyB,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,aAAa,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,cAAc,CAAC,CAWjF;IAEY,uBAAuB,CAClC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAWzB;IAEM,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAOtF;IAEY,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAOpF;IAEY,wBAAwB,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG5D;IAEY,kBAAkB,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAIrF;IAEY,kBAAkB,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEY,iBAAiB,CAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAG/E;IAEY,YAAY,CACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAQzB;IAEY,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnE;IAEY,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrF;IAEY,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAQxF;IAEY,oBAAoB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,2BAA2B,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,yBAAyB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,6BAA6B,CACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,oCAAoC,CAC/C,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,eAAe,GAAG,eAAe,GACrD,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG3E;IAEM,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnF;IAEM,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjF;IAEM,oBAAoB,CACzB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEM,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrE;IAEY,eAAe,CAC1B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAKtE;IAEY,aAAa,CACxB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,OAAO,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;IAEY,YAAY,CAAC,KAAK,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0B1B;IAEM,gBAAgB,CAAC,KAAK,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;IAEY,2BAA2B,CACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,yBAAyB,CACpC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,0BAA0B,CACrC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,wBAAwB,CACnC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEY,2BAA2B,CACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,cAAc,CAAC,CAIzB;IAEM,0BAA0B,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG3F;IAEY,gCAAgC,CAC3C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,8BAA8B,CACzC,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,kBAAkB,CAC7B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,cAAc,CAAC,CAczB;IAEY,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAG/D;IAEY,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGhF;IAEY,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjF;IAEY,gBAAgB,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,YAAY,CACvB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,cAAc,CAAC,CAQzB;IAEY,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGnF;IAEY,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGvF;IAEY,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAGjE;IAEY,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAWrE;IAED;;;;OAIG;YACW,uBAAuB;IA4BrC,OAAO,CAAC,6BAA6B;YAUvB,oBAAoB;IA+BlC,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,WAAW;YAOL,kBAAkB;YAQlB,uBAAuB;YAWvB,kBAAkB;YAWlB,eAAe;IAoB7B,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,mBAAmB;YAOb,oBAAoB;YASpB,yBAAyB;YASzB,iBAAiB;YAIjB,mBAAmB;YAUnB,oBAAoB;YAcpB,6BAA6B;YAwB7B,oBAAoB;YAwBpB,mBAAmB;YAsBnB,sBAAsB;YAOtB,mBAAmB;YA0BnB,eAAe;YAOf,iCAAiC;YAsBjC,cAAc;YASd,iBAAiB;YAWjB,mBAAmB;YAWnB,sBAAsB;YAWtB,kBAAkB;YAWlB,cAAc;YAId,kBAAkB;IA8ChC,OAAO,CAAC,aAAa;IAOrB;;;OAGG;YACW,6BAA6B;YAa7B,YAAY;CAsB3B;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAWlC"}

package/dist/backend/access-controlled-backend.js

@@ -1,3 +1,4 @@
+import { collectPages } from "./pagination.js";
 export class AccessPolicyError extends Error {
     constructor(message) {
         super(message);
@@ -338,7 +339,9 @@ export class AccessControlledBackend {
     async getCallHistory(query) {
         if (this.scope === "account")
             return this.delegate.getCallHistory(query);
-        const connectionIds = await this.ownedConnectionIds();
+        // sipgate rejects device IDs as history connection filters with HTTP 403.
+        // Only real extensions (phonelines, faxlines, SMS) are accepted there.
+        const connectionIds = await this.ownedHistoryConnectionIds();
         const requested = query.connectionIds;
         if (requested) {
             for (const connectionId of requested) {
@@ -346,18 +349,22 @@ export class AccessControlledBackend {
             }
         }
         const scopedConnectionIds = requested ?? [...connectionIds];
-        if (scopedConnectionIds.length === 0) {
-            return {
-                items: [],
-                pagination: {
-                    offset: query.offset,
-                    limit: query.limit,
-                    totalCount: 0,
-                    nextOffset: null,
-                },
-            };
+        if (scopedConnectionIds.length > 0) {
+            return this.delegate.getCallHistory({ ...query, connectionIds: scopedConnectionIds });
         }
-        return this.delegate.getCallHistory({ ...query, connectionIds: scopedConnectionIds });
+        // An account without filterable extensions would otherwise report an empty
+        // history. Read it unfiltered and keep only what belongs to the user.
+        const numbers = await this.ownedNumbers();
+        const { connectionIds: _ignored, ...unfiltered } = query;
+        const response = await this.delegate.getCallHistory(unfiltered);
+        const object = asObject(response);
+        const owned = items(response).filter((entry) => this.isOwnedHistoryEntry(entry, numbers));
+        return {
+            ...(object ?? {}),
+            items: owned,
+            filteredBy: "owned phone numbers",
+            note: "This account has no history extensions to filter on, so the account history was filtered by the user's own numbers.",
+        };
     }
     async exportHistory(query) {
         if (this.scope === "account")
@@ -418,6 +425,10 @@ export class AccessControlledBackend {
             await this.assertOwnedFaxline(faxlineId);
         return this.delegate.getFaxlineCallerId(userId, faxlineId);
     }
+    listSmsExtensions(userId) {
+        this.assertUser(userId);
+        return this.delegate.listSmsExtensions(this.scope === "account" ? userId : this.context.userId);
+    }
     async getHistoryEntry(entryId) {
         if (this.scope === "user")
             await this.assertOwnedHistoryEntry(entryId);
@@ -1019,6 +1030,13 @@ export class AccessControlledBackend {
             : [];
         if (entryConnections.some((connectionId) => connectionIds.has(connectionId)))
             return;
+        // Accounts without extensions produce entries that carry no owned
+        // connection, so fall back to the numbers the entry was placed between.
+        if (entry !== undefined) {
+            const numbers = await this.ownedNumbers();
+            if (this.isOwnedHistoryEntry(entry, numbers))
+                return;
+        }
         throw new AccessPolicyError("User scope does not permit access to the requested history entry.");
     }
     assertAccountWideConfirmation(confirmAccountWide, operation) {
@@ -1028,28 +1046,21 @@ export class AccessControlledBackend {
     }
     async ownedHistoryEntryIds() {
         try {
-            const connectionIds = [...await this.ownedConnectionIds()];
-            if (connectionIds.length === 0)
-                return [];
             const found = new Set();
-            const pageSize = 1000;
             for (const archived of [false, true]) {
-                for (let offset = 0;; offset += pageSize) {
-                    const response = await this.delegate.getCallHistory({
-                        archived,
-                        connectionIds,
-                        limit: pageSize,
-                        offset,
-                        types: ["CALL", "VOICEMAIL", "SMS", "FAX"],
-                    });
-                    const page = items(response);
-                    for (const entry of page) {
-                        const entryId = stringField(entry, "id");
-                        if (entryId)
-                            found.add(entryId);
-                    }
-                    if (page.length < pageSize)
-                        break;
+                // Route through the scoped reader so device IDs never reach sipgate
+                // as connection filters and unfilterable accounts still enumerate.
+                // Its entries may be filtered, so collectPages follows nextOffset.
+                const entries = await collectPages((offset, limit) => this.getCallHistory({
+                    archived,
+                    limit,
+                    offset,
+                    types: ["CALL", "VOICEMAIL", "SMS", "FAX"],
+                }), items, "history entries");
+                for (const entry of entries) {
+                    const entryId = stringField(entry, "id");
+                    if (entryId)
+                        found.add(entryId);
                 }
             }
             return [...found];
@@ -1128,6 +1139,26 @@ export class AccessControlledBackend {
         return (participantId !== undefined && deviceIds.has(participantId))
             || (phoneNumber !== undefined && numbers.phoneNumbers.has(phoneNumber));
     }
+    isOwnedHistoryEntry(entry, numbers) {
+        const source = stringField(entry, "source");
+        const target = stringField(entry, "target");
+        return (source !== undefined && numbers.phoneNumbers.has(source))
+            || (target !== undefined && numbers.phoneNumbers.has(target));
+    }
+    async ownedSmsExtensionIds() {
+        const response = await this.delegate.listSmsExtensions(this.context.userId);
+        return new Set(items(response)
+            .map((extension) => stringField(extension, "id"))
+            .filter((id) => Boolean(id)));
+    }
+    async ownedHistoryConnectionIds() {
+        const [phonelineIds, faxlineIds, smsIds] = await Promise.all([
+            this.ownedPhonelineIds(),
+            this.ownedFaxlineIds(),
+            this.ownedSmsExtensionIds(),
+        ]);
+        return new Set([...phonelineIds, ...faxlineIds, ...smsIds]);
+    }
     async ownedPhonelineIds() {
         return (await this.ownedPhonelineState()).ids;
     }
@@ -1383,14 +1414,7 @@ export class AccessControlledBackend {
         throw new AccessPolicyError("User scope does not permit editing an address that is shared with numbers of other users.");
     }
     async ownedNumbers() {
-        const pageSize = 1000;
-        const routed = [];
-        for (let offset = 0;; offset += pageSize) {
-            const page = items(await this.delegate.listUserNumbers(this.context.userId, { offset, limit: pageSize }));
-            routed.push(...page);
-            if (page.length < pageSize)
-                break;
-        }
+        const routed = await collectPages((offset, limit) => this.delegate.listUserNumbers(this.context.userId, { offset, limit }), items, "user numbers");
         // Quick dials and other number types are listed by the direct user-number
         // endpoint but may never appear in phoneline or device routing.
         const direct = items(await this.delegate.getUserNumbers(this.context.userId));