@aventara/mcp 1.0.0-rc.11 → 1.0.0-rc.13

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @aventara/mcp
 
+## 1.0.0-rc.13
+
+### Minor Changes
+
+- f3b291f: A new limit, `maxTransactionWrites` (default `20`), counts the write steps of one transaction plan: each `create`,
+  `update`, `upsert` and `delete` step, and each `appTx.$sql` step, since a statement cannot be classed as a read. A
+  plan with more is refused before anything runs (`422 A2009`, one `V1014` at `["operations"]`). It is set like every
+  other limit (`limits` at the root, overridden per limit by a layer) and is part of each Contract's `limits`, so every
+  Contract hash moves with this release. `maxTransactionOperations` still counts every step, reads and `$sql` steps
+  included. The two limits are separate: `maxTransactionWrites` defaults to `20` whatever `maxTransactionOperations` is
+  set to, so raising only the step limit still caps a plan at 20 writes; raise both. The limit counts steps, not rows: a
+  `create` step with nested `$create`s is one write. `POST /_all` is bounded by `maxAll`, not by either plan limit, and its writes do not roll back together.
+  The MCP `transaction` tool's description states the write limit when it is lower than the step limit.
+- f3b291f: `transactionsStyle` takes a third value, `"server"`: the server still opens transactions, and callers send no plans.
+  A forced call (`forceTransaction`), a write the policy checks after it runs and `ctx.$transaction` run in a
+  transaction as under `"interactive"`, while the layer has no `POST /_transactions` route, a plan sent to it answers as
+  that absent route (`404 A2002`, one `V1006` at `["operations"]`), `framework.transaction` refuses a plan of that
+  origin the same way, the generated client has no `tx` or `transaction`, and an MCP agent layer under it has no
+  `transaction` tool. `client: { transactionsStyle: "server" }` keeps forced writes atomic without letting remote
+  callers send multi-step plans. `forceTransaction` under `"none"` is still a startup error; under `"server"` it is
+  allowed. Like `"interactive"`, `"server"` needs an adapter with transactions (`COMPILER_UNAVAILABLE_CAPABILITY`
+  otherwise). The Contract's `transactions` carries the value, so a layer that states it gets a new Contract hash.
+
+### Patch Changes
+
+- Updated dependencies [6c3e25c]
+- Updated dependencies [2aaa27d]
+- Updated dependencies [f3b291f]
+- Updated dependencies [2aaa27d]
+- Updated dependencies [e4e8abd]
+- Updated dependencies [e662048]
+- Updated dependencies [f3b291f]
+- Updated dependencies [f3b291f]
+- Updated dependencies [6c3e25c]
+- Updated dependencies [6c3e25c]
+- Updated dependencies [a708188]
+- Updated dependencies [a9260d2]
+  - @aventara/core@1.0.0-rc.13
+
+## 1.0.0-rc.12
+
+### Patch Changes
+
+- Updated dependencies [fdeee8a]
+  - @aventara/core@1.0.0-rc.12
+
 ## 1.0.0-rc.11
 
 ### Patch Changes

package/dist/mcp.binder.js

@@ -24,6 +24,7 @@ export function bind(framework) {
         tools: compileToolCatalog({
             surface: protocol.surface(),
             maxTransactionOperations: agent.limits.maxTransactionOperations,
+            maxTransactionWrites: agent.limits.maxTransactionWrites,
             me: me !== undefined,
         }),
         contractDocument: protocol.encodeContract({

package/dist/tool-catalog.compiler.d.ts

@@ -33,10 +33,12 @@ export type McpToolDefinition = {
 };
 /** The URI of the MCP resource that holds the Agent Contract. */
 export declare const CONTRACT_RESOURCE_URI = "aventara://contract";
-/** What the catalog is compiled from: the agent binding's surface, its plan limit, and whether `me` is offered. */
+/** What the catalog is compiled from: the agent binding's surface, its plan limits, and whether `me` is offered. */
 export type CatalogSource = {
     readonly surface: ReturnType<AvProtocolBinding["surface"]>;
     readonly maxTransactionOperations: number;
+    /** Absent: no limit of its own beyond `maxTransactionOperations`. */
+    readonly maxTransactionWrites?: number;
     /** The access provider states its `client`, so `me` has an answer. */
     readonly me?: boolean;
 };

package/dist/tool-catalog.compiler.js

@@ -149,7 +149,7 @@ function familyTool(family, offer) {
         annotations: ANNOTATIONS[family],
     };
 }
-function transactionTool(offers, maxTransactionOperations) {
+function transactionTool(offers, maxTransactionOperations, maxTransactionWrites) {
     const families = OPERATION_FAMILIES.filter((family) => offers.has(family));
     const resources = [
         ...new Set([...offers.values()].flatMap((offer) => [...offer.keys()])),
@@ -165,7 +165,9 @@ function transactionTool(offers, maxTransactionOperations) {
             READ_THE_CONTRACT,
             "Each step is { resource, family, variant, args }, with the args of that family's tool.",
             'A step may use a value an earlier step returned: put { "$ref": { "operation": <the earlier step\'s index>, "path": ["<a field that step selected>"] } } where the value goes. The server adds the fingerprints the protocol requires.',
-            `At most ${maxTransactionOperations} steps.`,
+            maxTransactionWrites < maxTransactionOperations
+                ? `At most ${maxTransactionOperations} steps, and at most ${maxTransactionWrites} of them create, update, upsert or delete steps.`
+                : `At most ${maxTransactionOperations} steps.`,
             "A failed plan answers isError with the failing step's index (cause.operation), its code and its issues; an issue's path starts at operations[<step>].args.",
         ].join(" "),
         inputSchema: {
@@ -217,7 +219,7 @@ export function compileToolCatalog(source) {
     }
     if (offers.size > 0 &&
         source.surface.some((route) => route.kind === "transactions")) {
-        tools.push(transactionTool(offers, source.maxTransactionOperations));
+        tools.push(transactionTool(offers, source.maxTransactionOperations, source.maxTransactionWrites ?? source.maxTransactionOperations));
     }
     if (source.me === true) {
         tools.push(ME_TOOL_DEFINITION);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aventara/mcp",
-  "version": "1.0.0-rc.11",
+  "version": "1.0.0-rc.13",
   "license": "SEE LICENSE IN LICENSE",
   "description": "The MCP server for an Aventara application: its agent layer as Model Context Protocol tools.",
   "type": "module",
@@ -22,7 +22,7 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@aventara/core": "1.0.0-rc.11",
+    "@aventara/core": "1.0.0-rc.13",
     "@modelcontextprotocol/sdk": "1.32.2",
     "zod": "^4.6.7"
   },
@@ -30,7 +30,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@aventara/testing": "1.0.0-rc.11"
+    "@aventara/testing": "1.0.0-rc.13"
   },
   "scripts": {
     "build": "node ../../scripts/build/build-output.cleaner.ts dist && tsc -p tsconfig.json --removeComments --declaration false && tsc -p tsconfig.json --emitDeclarationOnly && node ../../scripts/build/declaration-comments.sanitizer.ts dist",