naftiko: 1.0.0-alpha2
info:
  label: SafeLine Management API — ACL Rules
  description: 'SafeLine Management API — ACL Rules. 7 operations. Lead operation: List ACL Rules. Self-contained Naftiko
    capability covering one Safeline business surface.'
  tags:
  - Safeline
  - ACL Rules
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    SAFELINE_API_KEY: SAFELINE_API_KEY
capability:
  consumes:
  - type: http
    namespace: management-acl-rules
    baseUri: https://{host}:9443
    description: SafeLine Management API — ACL Rules business capability. Self-contained, no shared references.
    resources:
    - name: api-ACLRuleAPI
      path: /api/ACLRuleAPI
      operations:
      - name: listaclrules
        method: GET
        description: List ACL Rules
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: page
          in: query
          type: integer
        - name: page_size
          in: query
          type: integer
      - name: createaclrule
        method: POST
        description: Create ACL Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: updateaclrule
        method: PUT
        description: Update ACL Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
      - name: deleteaclrule
        method: DELETE
        description: Delete ACL Rule
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-ACLRuleExecutionLogAPI
      path: /api/ACLRuleExecutionLogAPI
      operations:
      - name: getaclexecutionlogs
        method: GET
        description: Get ACL Rule Execution Logs
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: page
          in: query
          type: integer
        - name: page_size
          in: query
          type: integer
        - name: start_time
          in: query
          type: integer
        - name: end_time
          in: query
          type: integer
    - name: api-ACLWhiteListAPI
      path: /api/ACLWhiteListAPI
      operations:
      - name: listaclwhitelist
        method: GET
        description: List ACL Whitelist
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: addtoaclwhitelist
        method: POST
        description: Add to ACL Whitelist
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: apikey
      key: X-SLCE-API-Token
      value: '{{env.SAFELINE_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: management-acl-rules-rest
    port: 8080
    description: REST adapter for SafeLine Management API — ACL Rules. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/api/aclruleapi
      name: api-aclruleapi
      description: REST surface for api-ACLRuleAPI.
      operations:
      - method: GET
        name: listaclrules
        description: List ACL Rules
        call: management-acl-rules.listaclrules
        with:
          page: rest.page
          page_size: rest.page_size
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createaclrule
        description: Create ACL Rule
        call: management-acl-rules.createaclrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: PUT
        name: updateaclrule
        description: Update ACL Rule
        call: management-acl-rules.updateaclrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: deleteaclrule
        description: Delete ACL Rule
        call: management-acl-rules.deleteaclrule
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/aclruleexecutionlogapi
      name: api-aclruleexecutionlogapi
      description: REST surface for api-ACLRuleExecutionLogAPI.
      operations:
      - method: GET
        name: getaclexecutionlogs
        description: Get ACL Rule Execution Logs
        call: management-acl-rules.getaclexecutionlogs
        with:
          page: rest.page
          page_size: rest.page_size
          start_time: rest.start_time
          end_time: rest.end_time
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/aclwhitelistapi
      name: api-aclwhitelistapi
      description: REST surface for api-ACLWhiteListAPI.
      operations:
      - method: GET
        name: listaclwhitelist
        description: List ACL Whitelist
        call: management-acl-rules.listaclwhitelist
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: addtoaclwhitelist
        description: Add to ACL Whitelist
        call: management-acl-rules.addtoaclwhitelist
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: management-acl-rules-mcp
    port: 9090
    transport: http
    description: MCP adapter for SafeLine Management API — ACL Rules. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: list-acl-rules
      description: List ACL Rules
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: management-acl-rules.listaclrules
      with:
        page: tools.page
        page_size: tools.page_size
      outputParameters:
      - type: object
        mapping: $.
    - name: create-acl-rule
      description: Create ACL Rule
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: management-acl-rules.createaclrule
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: update-acl-rule
      description: Update ACL Rule
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: management-acl-rules.updateaclrule
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: delete-acl-rule
      description: Delete ACL Rule
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: management-acl-rules.deleteaclrule
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: get-acl-rule-execution-logs
      description: Get ACL Rule Execution Logs
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: management-acl-rules.getaclexecutionlogs
      with:
        page: tools.page
        page_size: tools.page_size
        start_time: tools.start_time
        end_time: tools.end_time
      outputParameters:
      - type: object
        mapping: $.
    - name: list-acl-whitelist
      description: List ACL Whitelist
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: management-acl-rules.listaclwhitelist
      outputParameters:
      - type: object
        mapping: $.
    - name: add-acl-whitelist
      description: Add to ACL Whitelist
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: management-acl-rules.addtoaclwhitelist
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.