Module policies 

Admin API endpoints for policy CRUD, plus catalogs of available plugin types and on-disk scripts. Policy mutations rewrite the in-memory gateway config and trigger validation + graph recompilation via SharedState::reload.

Functions

delete_policy 🔒

DELETE /api/policies/{name} — removes the named policy, then revalidates and recompiles. Returns {"status": "deleted"} on success.

get_policy 🔒

GET /api/policies/{name} — returns the named policy as JSON.

list_plugin_types 🔒

GET /api/plugins — returns the static catalog of node/plugin types (type id + human-readable description) that the UI’s node-graph editor offers in its palette. Always 200 OK.

list_policies 🔒

GET /api/policies — returns all configured policies as a JSON array.

list_scripts 🔒

GET /api/scripts — lists scripted-plugin files found in the plugins/ directory next to the config directory (currently .lua only).

plugin_catalog 🔒

The palette catalog: (type, description) for every registered node type.

router

Builds the router for /api/policies, /api/plugins, and /api/scripts.

update_policy 🔒

PUT /api/policies/{name} — upserts a policy from the JSON body (the path name overrides any name in the body), then revalidates and recompiles all route graphs. Returns {"status": "updated"} on success.

validate_policy 🔒

POST /api/policies/validate — validates + compiles a policy against the live supernodes, plugin configs and stores, without persisting it. Body is the policy definition itself ({"nodes": [...], "edges": [...], ...}); a name is optional and, if absent, is not saved anywhere. Mirrors the MCP validate_policy tool so a human in the UI and an agent driving the gateway see the same verdict.