fix(gateway): Phase 1 — Surfacing list_* paths

Restore get_advertised_prompts_for_grants and get_advertised_resources_for_grants
in facade.rs; wire list_prompts, get_prompt, list_resources, and read_resource
to filter through surfaced feature IDs (list_tools already fixed in 93e6bef).

Autonomous decisions:
- Used get_fetchable_prompts / get_readable_resources as invokable base — matches dev branch and existing facade aliases

Signed-off-by: crimsonsunset <jsangio1@gmail.com>

Author: crimsonsunset

crates/mcpmux-gateway/src/mcp/handler.rs

@@ -934,11 +934,13 @@ impl ServerHandler for McpMuxGatewayHandler {
             .resolve_routing(session_id_owned.as_deref(), &oauth_ctx.client_id)
             .await?;
 
+        // Get advertised (surfaced) prompts only — full fetchable set is reachable
+        // via mcpmux meta-tools; non-surfaced prompts stay off prompts/list.
         let prompts = self
             .services
             .pool_services
             .feature_service
-            .get_prompts_for_grants(&space_id.to_string(), &feature_set_ids)
+            .get_advertised_prompts_for_grants(&space_id.to_string(), &feature_set_ids)
             .await
             .map_err(|e| McpError::internal_error(format!("Failed to get prompts: {}", e), None))?;
 
@@ -995,7 +997,7 @@ impl ServerHandler for McpMuxGatewayHandler {
             .services
             .pool_services
             .feature_service
-            .get_prompts_for_grants(&space_id.to_string(), &feature_set_ids)
+            .get_advertised_prompts_for_grants(&space_id.to_string(), &feature_set_ids)
             .await
             .map_err(|e| {
                 McpError::internal_error(format!("Failed to verify authorization: {}", e), None)
@@ -1049,11 +1051,13 @@ impl ServerHandler for McpMuxGatewayHandler {
             .resolve_routing(session_id_owned.as_deref(), &oauth_ctx.client_id)
             .await?;
 
+        // Get advertised (surfaced) resources only — full readable set is reachable
+        // via mcpmux meta-tools; non-surfaced resources stay off resources/list.
         let resources = self
             .services
             .pool_services
             .feature_service
-            .get_resources_for_grants(&space_id.to_string(), &feature_set_ids)
+            .get_advertised_resources_for_grants(&space_id.to_string(), &feature_set_ids)
             .await
             .map_err(|e| {
                 McpError::internal_error(format!("Failed to get resources: {}", e), None)
@@ -1107,7 +1111,7 @@ impl ServerHandler for McpMuxGatewayHandler {
             .services
             .pool_services
             .feature_service
-            .get_resources_for_grants(&space_id.to_string(), &feature_set_ids)
+            .get_advertised_resources_for_grants(&space_id.to_string(), &feature_set_ids)
             .await
             .map_err(|e| {
                 McpError::internal_error(format!("Failed to verify authorization: {}", e), None)

crates/mcpmux-gateway/src/pool/features/facade.rs

@@ -144,6 +144,30 @@ impl FeatureService {
             .await
     }
 
+    /// Resources promoted into client `resources/list` (surfaced backend resources only).
+    pub async fn get_advertised_resources_for_grants(
+        &self,
+        space_id: &str,
+        feature_set_ids: &[String],
+    ) -> Result<Vec<ServerFeature>> {
+        if feature_set_ids.is_empty() {
+            return Ok(Vec::new());
+        }
+
+        let readable = self
+            .get_readable_resources_for_grants(space_id, feature_set_ids)
+            .await?;
+        let surfaced_ids = self
+            .resolution
+            .resolve_surfaced_feature_ids(feature_set_ids)
+            .await?;
+
+        Ok(readable
+            .into_iter()
+            .filter(|f| surfaced_ids.contains(&f.id.to_string()))
+            .collect())
+    }
+
     /// Resolve granted feature sets to prompts fetchable via search/fetch ACL.
     pub async fn get_fetchable_prompts_for_grants(
         &self,
@@ -153,6 +177,30 @@ impl FeatureService {
         self.get_prompts_for_grants(space_id, feature_set_ids).await
     }
 
+    /// Prompts promoted into client `prompts/list` (surfaced backend prompts only).
+    pub async fn get_advertised_prompts_for_grants(
+        &self,
+        space_id: &str,
+        feature_set_ids: &[String],
+    ) -> Result<Vec<ServerFeature>> {
+        if feature_set_ids.is_empty() {
+            return Ok(Vec::new());
+        }
+
+        let fetchable = self
+            .get_fetchable_prompts_for_grants(space_id, feature_set_ids)
+            .await?;
+        let surfaced_ids = self
+            .resolution
+            .resolve_surfaced_feature_ids(feature_set_ids)
+            .await?;
+
+        Ok(fetchable
+            .into_iter()
+            .filter(|f| surfaced_ids.contains(&f.id.to_string()))
+            .collect())
+    }
+
     /// Catalog tools in the Space that require binding a FeatureSet before invoke.
     pub async fn list_inactive_discovery_tools(
         &self,