@dforge-core/dforge-mcp 0.2.3 → 0.2.4

package/dist/server.js

@@ -3641,7 +3641,12 @@ var require_fast_uri = __commonJS({
     }
     function resolve8(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
+      const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+      const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize2(resolved, schemelessOptions);
     }
@@ -3766,6 +3771,8 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+    var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -3795,6 +3802,25 @@ var require_fast_uri = __commonJS({
           uri = "//" + uri;
         }
       }
+      const authorityMatch = uri.match(AUTHORITY_PREFIX);
+      if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+        parsed.error = "URI authority must not contain a literal backslash.";
+        malformedAuthorityOrPort = true;
+      }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];
@@ -23039,17 +23065,33 @@ function normalizeObjectSchema(schema2) {
   }
   return void 0;
 }
+function getDotPath(path17) {
+  if (path17.length === 0) {
+    return "object root";
+  }
+  return path17.reduce((acc, seg, index) => {
+    if (index === 0) {
+      return String(seg);
+    }
+    if (typeof seg === "number") {
+      return `${acc}[${seg}]`;
+    }
+    return `${acc}.${seg}`;
+  }, "");
+}
 function getParseErrorMessage(error51) {
   if (error51 && typeof error51 === "object") {
+    if ("issues" in error51 && Array.isArray(error51.issues) && error51.issues.length > 0) {
+      return error51.issues.map((i) => {
+        if (!i.path?.length) {
+          return i.message;
+        }
+        return `${i.message} at ${getDotPath(i.path)}`;
+      }).join("\n");
+    }
     if ("message" in error51 && typeof error51.message === "string") {
       return error51.message;
     }
-    if ("issues" in error51 && Array.isArray(error51.issues) && error51.issues.length > 0) {
-      const firstIssue = error51.issues[0];
-      if (firstIssue && typeof firstIssue === "object" && "message" in firstIssue) {
-        return String(firstIssue.message);
-      }
-    }
     try {
       return JSON.stringify(error51);
     } catch {
@@ -29664,16 +29706,7 @@ var Server = class extends Protocol {
     if (!methodSchema) {
       throw new Error("Schema is missing a method literal");
     }
-    let methodValue;
-    if (isZ4Schema(methodSchema)) {
-      const v4Schema = methodSchema;
-      const v4Def = v4Schema._zod?.def;
-      methodValue = v4Def?.value ?? v4Schema.value;
-    } else {
-      const v3Schema = methodSchema;
-      const legacyDef = v3Schema._def;
-      methodValue = legacyDef?.value ?? v3Schema.value;
-    }
+    const methodValue = getLiteralValue(methodSchema);
     if (typeof methodValue !== "string") {
       throw new Error("Schema method literal must be a string");
     }
@@ -30861,8 +30894,17 @@ var EMPTY_COMPLETION_RESULT = {
 var import_node_process = __toESM(require("process"), 1);
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+var STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
 var ReadBuffer = class {
+  constructor(options) {
+    this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
+  }
   append(chunk) {
+    const newSize = (this._buffer?.length ?? 0) + chunk.length;
+    if (newSize > this._maxBufferSize) {
+      this.clear();
+      throw new Error(`ReadBuffer exceeded maximum size of ${this._maxBufferSize} bytes`);
+    }
     this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
   }
   readMessage() {
@@ -30890,18 +30932,24 @@ function serializeMessage(message) {
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var StdioServerTransport = class {
-  constructor(_stdin = import_node_process.default.stdin, _stdout = import_node_process.default.stdout) {
+  constructor(_stdin = import_node_process.default.stdin, _stdout = import_node_process.default.stdout, options) {
     this._stdin = _stdin;
     this._stdout = _stdout;
-    this._readBuffer = new ReadBuffer();
     this._started = false;
     this._ondata = (chunk) => {
-      this._readBuffer.append(chunk);
-      this.processReadBuffer();
+      try {
+        this._readBuffer.append(chunk);
+        this.processReadBuffer();
+      } catch (error51) {
+        this.onerror?.(error51);
+        this.close().catch(() => {
+        });
+      }
     };
     this._onerror = (error51) => {
       this.onerror?.(error51);
     };
+    this._readBuffer = new ReadBuffer({ maxBufferSize: options?.maxBufferSize });
   }
   /**
    * Starts listening for messages on stdin.
@@ -31166,7 +31214,7 @@ function buildZedSettings() {
 var fs = __toESM(require("fs"));
 var path = __toESM(require("path"));
 
-// node_modules/@dforge-core/metadata/dist/aggregation.js
+// node_modules/@dforge-core/metadata/dist/index.js
 var AggType = {
   Sum: "sum",
   Count: "count",
@@ -31176,8 +31224,6 @@ var AggType = {
   Group: "group"
 };
 var AGG_TYPE_LIST = Object.values(AggType);
-
-// node_modules/@dforge-core/metadata/dist/field-types.js
 var fieldTypes = [
   { cd: "text", name: "Text", columnType: "D", baseDatatypeCd: "string", supportedAgg: null, maxLen: null, precision: null, useStringInFilter: true },
   { cd: "avatar", name: "Avatar Name", columnType: "D", baseDatatypeCd: "string", supportedAgg: null, maxLen: null, precision: null, useStringInFilter: true },
@@ -31217,8 +31263,6 @@ function isFieldTypeCd(cd) {
 function getFieldType(cd) {
   return byCd.get(cd);
 }
-
-// node_modules/@dforge-core/metadata/dist/base-datatypes.js
 var BASE_TO_DB = {
   binary: "bytea",
   bool: "bool",
@@ -31240,8 +31284,6 @@ var BASE_TO_DB = {
 function baseToDbDatatype(base) {
   return BASE_TO_DB[base] ?? null;
 }
-
-// node_modules/@dforge-core/metadata/dist/column-types.js
 var columnTypes = [
   { cd: "D", name: "Value", description: "A plain data column stored on this entity." },
   { cd: "R", name: "Reference", description: "An N:1 lookup to another entity (foreign key)." },
@@ -31255,8 +31297,6 @@ var byCd2 = new Map(columnTypes.map((ct) => [ct.cd, ct]));
 function getColumnType(cd) {
   return byCd2.get(cd);
 }
-
-// node_modules/@dforge-core/metadata/dist/traits.js
 var traits = [
   {
     cd: "identity",
@@ -31331,16 +31371,14 @@ function templateFields(fields, entity) {
   for (const [name, def] of Object.entries(fields)) {
     const key = applyTemplate(name, entity);
     const next = { ...def };
-    if (typeof next.description === "string")
-      next.description = applyTemplate(next.description, entity);
+    if (typeof next.description === "string") next.description = applyTemplate(next.description, entity);
     out[key] = next;
   }
   return out;
 }
 function expandTrait(traitCd, entityName) {
   const trait = byCd3.get(traitCd);
-  if (!trait)
-    return {};
+  if (!trait) return {};
   const result = {};
   for (const included of trait.includes ?? []) {
     Object.assign(result, expandTrait(included, entityName));
@@ -31350,12 +31388,9 @@ function expandTrait(traitCd, entityName) {
 }
 function expandTraits(traitCds, entityName) {
   const result = {};
-  for (const cd of traitCds)
-    Object.assign(result, expandTrait(cd, entityName));
+  for (const cd of traitCds) Object.assign(result, expandTrait(cd, entityName));
   return result;
 }
-
-// node_modules/@dforge-core/metadata/dist/derive.js
 var NUMERIC_TOTAL = 18;
 var TEXT_BACKED = /* @__PURE__ */ new Set(["textarea", "markdown", "richtext", "code"]);
 var DB_DATATYPE_OVERRIDE = {
@@ -31364,23 +31399,18 @@ var DB_DATATYPE_OVERRIDE = {
 };
 function deriveDbDatatype(fieldTypeCd, options = {}) {
   const ft = getFieldType(fieldTypeCd);
-  if (!ft)
-    return "varchar";
-  if (ft.columnType === "R" || ft.columnType === "S")
-    return null;
+  if (!ft) return "varchar";
+  if (ft.columnType === "R" || ft.columnType === "S") return null;
   const override = DB_DATATYPE_OVERRIDE[ft.cd];
-  if (override)
-    return override;
+  if (override) return override;
   const base = baseToDbDatatype(ft.baseDatatypeCd);
-  if (base === null)
-    return null;
+  if (base === null) return null;
   if (ft.baseDatatypeCd === "number") {
     const precision = options.precision ?? ft.precision;
     return precision != null ? `numeric(${NUMERIC_TOTAL},${precision})` : "numeric";
   }
   if (ft.baseDatatypeCd === "string") {
-    if (TEXT_BACKED.has(ft.cd))
-      return "text";
+    if (TEXT_BACKED.has(ft.cd)) return "text";
     const maxLen = options.maxLen ?? ft.maxLen;
     return maxLen != null ? `varchar(${maxLen})` : "varchar";
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dforge-core/dforge-mcp",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "MCP server for dForge module authoring. Exposes 34 scaffold/patch/validate/pack/install tools and schema resources so AI agents (Claude Code, Cursor, Zed) can create and ship dForge modules.",
   "license": "MIT",
   "homepage": "https://github.com/iash44/dForge-core",
@@ -34,9 +34,9 @@
     "install-skills": "node scripts/install-skills.mjs"
   },
   "dependencies": {
-    "@dforge-core/dforge-cli": "^0.2.10",
-    "@dforge-core/metadata": "^0.0.12",
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@dforge-core/dforge-cli": "^0.2.12",
+    "@dforge-core/metadata": "^0.0.13",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/resources/schemas/data-views.schema.json

@@ -492,7 +492,20 @@
 				},
 				"o": {
 					"type": "string",
-					"description": "Operator: eq, neq, =, !=, gt, gtEq, grEq, lt, ltEq, in, nIn, like, isNull, isNotNull, etc."
+					"enum": [
+						"=", "eq", "!=", "notEq",
+						">", "gr", ">=", "grEq", "<", "less", "<=", "lessEq",
+						"eqRef",
+						"contains", "!contains", "nContain",
+						"start", "!start", "nStart",
+						"end", "!end", "nEnd",
+						"mask", "!mask", "nMask",
+						"null", "empty", "!null", "nEmpty",
+						"in", "!in", "nIn",
+						"between", "btw", "!between", "nBetween",
+						"f", "func"
+					],
+					"description": "Operator. Closed set — this is exactly what the server's FilterBuilder translates, and an operator outside it is rejected at install. Symbolic forms and their word aliases are equivalent ('=' / 'eq', '!=' / 'notEq', '>' / 'gr', '>=' / 'grEq', '<' / 'less', '<=' / 'lessEq'); a leading '!' negates, with 'n'-prefixed spellings as the alias ('!in' / 'nIn'). Null checks are 'null' / 'empty' and '!null' / 'nEmpty' (NOT 'isNull' / 'isNotNull'); substring matching is 'contains' (NOT 'like'). 'eqRef' compares against another column (v = column code), 'f' / 'func' takes v = {fn: 'isToday' | 'isYesterday' | 'isThisWeek' | 'isThisMonth' | 'isThisYear' | 'isPast' | 'isFuture' | 'isCurrentUser'}."
 				},
 				"v": {
 					"description": "Comparison value. Scalars, arrays (for in/nIn), or parameter references like '@param_code'."
@@ -506,8 +519,8 @@
 			"properties": {
 				"g": {
 					"type": "string",
-					"enum": ["and", "or"],
-					"description": "Group combinator"
+					"enum": ["and", "or", "!and", "nAnd", "!or", "nOr"],
+					"description": "Group combinator. '!and' / '!or' negate the whole group ('nAnd' / 'nOr' are the alias spellings). Closed set — an unknown combinator is rejected at install (at query time it would silently fall back to AND)."
 				},
 				"i": {
 					"type": "array",

package/resources/schemas/folders.schema.json

@@ -87,7 +87,23 @@
 			"required": ["c", "o"],
 			"properties": {
 				"c": { "type": "string" },
-				"o": { "type": "string" },
+				"o": {
+					"type": "string",
+					"enum": [
+						"=", "eq", "!=", "notEq",
+						">", "gr", ">=", "grEq", "<", "less", "<=", "lessEq",
+						"eqRef",
+						"contains", "!contains", "nContain",
+						"start", "!start", "nStart",
+						"end", "!end", "nEnd",
+						"mask", "!mask", "nMask",
+						"null", "empty", "!null", "nEmpty",
+						"in", "!in", "nIn",
+						"between", "btw", "!between", "nBetween",
+						"f", "func"
+					],
+					"description": "Operator — same closed set as data_views.json. Null checks are 'null' / '!null' (NOT 'isNull' / 'isNotNull'); substring matching is 'contains' (NOT 'like'). An operator outside this set is rejected at install; at query time it would be dropped, widening the row filter it was meant to enforce."
+				},
 				"v": {}
 			},
 			"additionalProperties": false
@@ -96,7 +112,7 @@
 			"type": "object",
 			"required": ["g", "i"],
 			"properties": {
-				"g": { "type": "string", "enum": ["and", "or"] },
+				"g": { "type": "string", "enum": ["and", "or", "!and", "nAnd", "!or", "nOr"] },
 				"i": {
 					"type": "array",
 					"items": { "$ref": "#/$defs/filter" }

package/resources/schemas/reports.schema.json

@@ -366,7 +366,23 @@
 			"required": ["c", "o"],
 			"properties": {
 				"c": { "type": "string" },
-				"o": { "type": "string" },
+				"o": {
+					"type": "string",
+					"enum": [
+						"=", "eq", "!=", "notEq",
+						">", "gr", ">=", "grEq", "<", "less", "<=", "lessEq",
+						"eqRef",
+						"contains", "!contains", "nContain",
+						"start", "!start", "nStart",
+						"end", "!end", "nEnd",
+						"mask", "!mask", "nMask",
+						"null", "empty", "!null", "nEmpty",
+						"in", "!in", "nIn",
+						"between", "btw", "!between", "nBetween",
+						"f", "func"
+					],
+					"description": "Operator — same closed set as data_views.json. Null checks are 'null' / '!null' (NOT 'isNull' / 'isNotNull'); substring matching is 'contains' (NOT 'like'). An operator outside this set is rejected at install; at query time it would be dropped, silently widening the dataset."
+				},
 				"v": {}
 			},
 			"additionalProperties": false
@@ -375,7 +391,7 @@
 			"type": "object",
 			"required": ["g", "i"],
 			"properties": {
-				"g": { "type": "string", "enum": ["and", "or"] },
+				"g": { "type": "string", "enum": ["and", "or", "!and", "nAnd", "!or", "nOr"] },
 				"i": {
 					"type": "array",
 					"items": { "$ref": "#/$defs/filter" }

package/skills/dforge-mcp-author/references/reports.md

@@ -61,7 +61,7 @@ A report has `description`, a `datasets` map, a `layout` object (`{ panels: [...
     "query": {
         "entityCd": "opportunity",
         "columns": ["stage", "amount", "close_date", "customer.name"],
-        "filter": { "c": "stage", "o": "ne", "v": "Closed Lost" },
+        "filter": { "c": "stage", "o": "!=", "v": "Closed Lost" },
         "sort": [ { "c": "close_date", "d": "desc" } ]
     },
     "columnsDef": { "amount": { "label": "Deal Value" }, "customer.name": { "label": "Account" } }