{
  "version": 1,
  "source": {
    "kind": "explicit",
    "name": "dws-tool-metadata/devapp",
    "repository": "DingTalk-Real-AI/dingtalk-workspace-cli",
    "channel": "open-source",
    "reviewed": true
  },
  "tools": {
    "devapp.shortcut_list": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +list",
      "runtime_gate": "none"
    },
    "devapp.shortcut_get": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +get",
      "runtime_gate": "none"
    },
    "devapp.shortcut_create": {
      "effect": "write",
      "risk": "medium",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +create",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_update": {
      "effect": "write",
      "risk": "medium",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +update",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_delete": {
      "effect": "destructive",
      "risk": "high",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +delete",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_enable": {
      "effect": "write",
      "risk": "medium",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +enable",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_disable": {
      "effect": "destructive",
      "risk": "high",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +disable",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_webapp_get": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +webapp-get",
      "runtime_gate": "none"
    },
    "devapp.shortcut_webapp_config": {
      "effect": "write",
      "risk": "medium",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +webapp-config",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_permission_list": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +permission-list",
      "runtime_gate": "none"
    },
    "devapp.shortcut_member_list": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +member-list",
      "runtime_gate": "none"
    },
    "devapp.shortcut_member_add": {
      "effect": "write",
      "risk": "medium",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +member-add",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_member_remove": {
      "effect": "destructive",
      "risk": "high",
      "confirmation": "user_required",
      "idempotency": "unknown",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +member-remove",
      "runtime_gate": "typed_yes"
    },
    "devapp.shortcut_robot_get": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +robot-get",
      "runtime_gate": "none"
    },
    "devapp.shortcut_event_list": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +event-list",
      "runtime_gate": "none"
    },
    "devapp.shortcut_version_list": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +version-list",
      "runtime_gate": "none"
    },
    "devapp.shortcut_version_get": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +version-get",
      "runtime_gate": "none"
    },
    "devapp.shortcut_version_check_approval": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +version-check-approval",
      "runtime_gate": "none"
    },
    "devapp.shortcut_version_status": {
      "effect": "read",
      "risk": "low",
      "confirmation": "not_required",
      "idempotency": "idempotent",
      "interface_mode": "composite",
      "availability": "available",
      "interface_reason": "Reviewed built-in shortcut adapter: the executable CLI owns validation, optional multi-step orchestration, output projection, and confirmation; the complete command contract is not represented by one pinned MCP interface_ref.",
      "reviewed": true,
      "review_reason": "Reviewed against the built-in Shortcut registry and mounted Cobra command: publishes the executable risk gate and composite interface without inventing a direct MCP identity.",
      "cli_path": "devapp +version-status",
      "runtime_gate": "none"
    }
  }
}