feat: add collection write tools (folders, ratings, custom fields) (#9)

* feat: add collection write tools (folders, ratings, custom fields)

Add 11 new MCP tools for modifying Discogs collections:

Folder management:
- list_folders, create_folder, edit_folder, delete_folder

Collection items:
- add_to_collection, remove_from_collection, move_release

Ratings:
- rate_release

Custom fields:
- list_custom_fields, edit_custom_field

All write operations invalidate the user's collection cache to
ensure subsequent reads reflect the changes. Custom field edits
skip cache invalidation since they don't affect collection structure.

Client layer (discogs.ts): 9 new API methods wrapping Discogs v2
endpoints with OAuth 1.0a auth, throttling, and retry.

Cached layer (cachedDiscogs.ts): Pass-through wrappers that call
invalidateUserCache() after mutations.

Tools layer (authenticated.ts): 11 new server.tool() registrations
following existing patterns (auth guard, Zod validation, consistent
response format).

* chore: update package-lock.json

* test: add tests for collection write tools and fix tool count assertion

Add unit tests for new DiscogsClient write methods (folders, ratings,
custom fields) and CachedDiscogsClient cache invalidation behavior.
Fix hardcoded tool count in integration test (8 → 18).

* feat: add create_custom_field tool

Adds createCustomField() to DiscogsClient and CachedDiscogsClient (with
cache invalidation), registers the create_custom_field MCP tool, and
adds full test coverage — success, body shape, cache invalidation, and
429 rate limit tests. Bumps wrangler to ^4.76.0.

* Revert "feat: add create_custom_field tool"

This reverts commit c893031.

Author: jhuggart

package-lock.json

@@ -16,6 +16,8 @@ import {
 	type DiscogsCollectionStats,
 	type DiscogsSearchResponse,
 	type DiscogsCollectionItem,
+	type DiscogsFolder,
+	type DiscogsCustomField,
 } from './discogs'
 import { SmartCache, CacheKeys, createDiscogsCache } from '../utils/cache'
 
@@ -429,6 +431,128 @@ export class CachedDiscogsClient {
 		return stats
 	}
 
+	// ──────────────────────────────────────────────
+	// Collection write operations (pass-through with cache invalidation)
+	// ──────────────────────────────────────────────
+
+	async listFolders(
+		username: string,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<DiscogsFolder[]> {
+		return this.client.listFolders(username, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+	}
+
+	async createFolder(
+		username: string,
+		name: string,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<DiscogsFolder> {
+		const result = await this.client.createFolder(username, name, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		await this.invalidateUserCache(username)
+		return result
+	}
+
+	async editFolder(
+		username: string,
+		folderId: number,
+		name: string,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<DiscogsFolder> {
+		const result = await this.client.editFolder(username, folderId, name, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		await this.invalidateUserCache(username)
+		return result
+	}
+
+	async deleteFolder(
+		username: string,
+		folderId: number,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<void> {
+		await this.client.deleteFolder(username, folderId, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		await this.invalidateUserCache(username)
+	}
+
+	async addToFolder(
+		username: string,
+		folderId: number,
+		releaseId: number,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<{ instance_id: number; resource_url: string }> {
+		const result = await this.client.addToFolder(username, folderId, releaseId, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		await this.invalidateUserCache(username)
+		return result
+	}
+
+	async removeFromFolder(
+		username: string,
+		folderId: number,
+		releaseId: number,
+		instanceId: number,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<void> {
+		await this.client.removeFromFolder(username, folderId, releaseId, instanceId, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		await this.invalidateUserCache(username)
+	}
+
+	async editInstance(
+		username: string,
+		folderId: number,
+		releaseId: number,
+		instanceId: number,
+		changes: { folder_id?: number; rating?: number },
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<void> {
+		await this.client.editInstance(username, folderId, releaseId, instanceId, changes, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		await this.invalidateUserCache(username)
+	}
+
+	async listCustomFields(
+		username: string,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<DiscogsCustomField[]> {
+		return this.client.listCustomFields(username, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+	}
+
+	async editCustomFieldValue(
+		username: string,
+		folderId: number,
+		releaseId: number,
+		instanceId: number,
+		fieldId: number,
+		value: string,
+		accessToken: string,
+		accessTokenSecret: string,
+		consumerKey: string,
+		consumerSecret: string,
+	): Promise<void> {
+		await this.client.editCustomFieldValue(username, folderId, releaseId, instanceId, fieldId, value, accessToken, accessTokenSecret, consumerKey, consumerSecret)
+		// No cache invalidation needed — custom fields don't affect collection structure
+	}
+
 	/**
 	 * Cleanup old cache entries
 	 */