@dforge-core/dforge-mcp 0.2.40 → 0.2.42

package/CHANGELOG.md

@@ -4,6 +4,24 @@ All notable changes to `@dforge-core/dforge-mcp`. This project uses semver-ish
 `0.1.0-rc.N` pre-release tags; the published version is set at publish time via
 the release workflow, so committed `package.json` versions are placeholders.
 
+## 0.2.41 — 2026-10-15
+
+**Schemas follow metadata 0.0.42.** `dforge://schema/entity` describes `periodGuards` (a closed-period
+lock for a document that posts to no register) and the `unique` / `where` keys of an index (a partial
+or unique index). `dforge://schema/roles` checks the shape of a `rights` key, so an action grant written
+without `action:` is flagged where it is typed.
+
+**DSL builtins.** `getAccountBalance` and `getAccountTurnover` show the new last `options` argument
+(`groupBy`, `exclude`, and `before` on a balance).
+
+**Needs `@dforge-core/dforge-cli` 0.2.32**, which validates, packs and installs the above. It also
+refuses a roles rights key that misses its prefix, which `dforge_module_validate` now reports.
+
+## 0.2.40 — 2026-10-13
+
+**An extension file that declares only `reactions` is valid** in `dforge://schema/entity` (metadata
+0.0.41), so a bridge module's extension carrying just field-change reactions no longer fails validation.
+
 ## 0.2.39 — 2026-10-13
 
 **Field-change reactions are in the entity schema.** `dforge://schema/entity` describes `reactions`

package/dist/server.js

@@ -31002,7 +31002,7 @@ var import_node_crypto = require("crypto");
 var fs2 = __toESM(require("fs"));
 var path2 = __toESM(require("path"));
 
-// node_modules/.pnpm/@dforge-core+dforge-cli@0.2.30/node_modules/@dforge-core/dforge-cli/dist/lib.mjs
+// node_modules/.pnpm/@dforge-core+dforge-cli@0.2.32/node_modules/@dforge-core/dforge-cli/dist/lib.mjs
 function buildManifest(opts, moduleId) {
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const manifest = {
@@ -31290,7 +31290,7 @@ function buildZedTasks() {
 var fs = __toESM(require("fs"));
 var path = __toESM(require("path"));
 
-// node_modules/.pnpm/@dforge-core+metadata@0.0.41/node_modules/@dforge-core/metadata/dist/index.js
+// node_modules/.pnpm/@dforge-core+metadata@0.0.42/node_modules/@dforge-core/metadata/dist/index.js
 var AggType = {
   Sum: "sum",
   Count: "count",
@@ -34622,7 +34622,7 @@ var path10 = __toESM(require("path"));
 var fs7 = __toESM(require("fs"));
 var path9 = __toESM(require("path"));
 
-// node_modules/.pnpm/@dforge-core+metadata@0.0.41/node_modules/@dforge-core/metadata/dist/dsl/index.js
+// node_modules/.pnpm/@dforge-core+metadata@0.0.42/node_modules/@dforge-core/metadata/dist/dsl/index.js
 var PUNCT3 = ["===", "!=="];
 var PUNCT2 = [
   "==",
@@ -35425,15 +35425,15 @@ var BUILTINS = [
   },
   {
     name: "getAccountBalance",
-    signature: "getAccountBalance(register, account, filter?, asOf?)",
+    signature: "getAccountBalance(register, account, filter?, asOf?, options?)",
     returns: "object",
-    doc: "Balance of one account of an accounting register: `{debit, credit, net}` per resource. `filter` narrows by a dimension, or by an analytic kind the ACCOUNT declares \u2014 an analytic takes the key alone, or `{ entity, value }` to name one entity of a kind that is a union of several."
+    doc: "Balance of one account of an accounting register: `{debit, credit, net}` per resource. `filter` narrows by a dimension, or by an analytic kind the ACCOUNT declares \u2014 an analytic takes the key alone, or `{ entity, value }` to name one entity of a kind that is a union of several. `options`: `groupBy` (a name or array \u2014 returns an array, a row per combination with a non-zero balance), `exclude: { entity, key }` (leaves out that document's postings) and `before` (a moment, exclusive, in place of `asOf`)."
   },
   {
     name: "getAccountTurnover",
-    signature: "getAccountTurnover(register, account, filter, from, to)",
+    signature: "getAccountTurnover(register, account, filter, from, to, options?)",
     returns: "object",
-    doc: "What moved through one account over an interval: `{debit, credit, net}` per resource. `filter` narrows as in `getAccountBalance` and may be `null`; `from` and `to` are both required."
+    doc: "What moved through one account over an interval: `{debit, credit, net}` per resource. `filter` narrows as in `getAccountBalance` and may be `null`; `from` and `to` are both required. `options` takes `groupBy` and `exclude` as in `getAccountBalance`; a grouped turnover has a row per combination that moved."
   },
   {
     name: "getCorrespondence",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dforge-core/dforge-mcp",
-  "version": "0.2.40",
+  "version": "0.2.42",
   "description": "MCP server for dForge module authoring. Exposes 35 scaffold/patch/validate/pack/install tools and schema resources so AI agents (Claude Code, Cursor, Zed) can create and ship dForge modules.",
   "license": "MIT",
   "homepage": "https://github.com/iash44/dForge-core",
@@ -26,8 +26,8 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@dforge-core/dforge-cli": "^0.2.30",
-    "@dforge-core/metadata": "^0.0.41",
+    "@dforge-core/dforge-cli": "^0.2.32",
+    "@dforge-core/metadata": "^0.0.42",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3"
   },

package/resources/schemas/entity.schema.json

@@ -192,11 +192,20 @@
 						"type": "array",
 						"minItems": 1,
 						"items": { "type": "string" },
-						"description": "Indexed columns, in order. Install refuses any key other than fields and using - \"columns\", which a unique constraint accepts, included."
+						"description": "Indexed columns, in order. Install refuses any key other than fields, using, unique and where - \"columns\", which a unique constraint accepts, included."
 					},
 					"using": {
 						"enum": ["btree", "hash", "gin", "gist", "brin"],
 						"description": "Index method. Omitted, btree."
+					},
+					"unique": {
+						"type": "boolean",
+						"description": "A unique index. With \"where\" it is unique among the rows the condition selects, which a unique constraint cannot be (unique among the rows that are not deleted)."
+					},
+					"where": {
+						"type": "string",
+						"minLength": 1,
+						"description": "A partial index: SQL condition over the table's columns, e.g. \"is_deleted = false\". Only the rows it selects are indexed, and a query uses the index only when its own filter implies the condition. One condition, without ';', '$' or comments. Changing it rebuilds the index on upgrade."
 					}
 				}
 			}
@@ -209,6 +218,26 @@
 			"$ref": "#/$defs/periodConfig",
 			"description": "Period entity configuration. Requires 'period' trait."
 		},
+		"periodGuards": {
+			"type": "array",
+			"description": "Closed-period locks for a document that posts to no register. Each guard names a period entity, the date the document's period follows from, and the column that references the period. The platform fills that column from the date and makes it a foreign key, so a document is written only into a period that exists and is open, and a period documents refer to cannot be deleted. Not allowed on an extension.",
+			"items": {
+				"type": "object",
+				"required": ["periodEntity", "periodDateField", "periodField", "lockedFields"],
+				"properties": {
+					"periodEntity": { "type": "string", "description": "The period entity ('period' trait): this module's, or another module's as 'module.entity'." },
+					"periodDateField": { "type": "string", "description": "The document's date column the period is resolved from." },
+					"periodField": { "type": "string", "description": "The document's column referencing the period's key (varchar, like the key). Filled by the platform from the date; whatever a writer puts there is replaced." },
+					"periodKeyField": { "type": "string", "default": "period_key", "description": "The period entity's key column. Must be its primary key or unique." },
+					"periodClosedField": { "type": "string", "default": "closed", "description": "The period entity's closed flag." },
+					"lockedFields": { "type": "array", "items": { "type": "string" }, "minItems": 1, "description": "Fields a closed period freezes. Insert and delete are always refused there, and the date is always watched; [\"periodDateField\"] refuses just that, [\"*\"] freezes the whole row." },
+					"lineEntity": { "type": "string", "description": "The document's line entity, guarded through its header's date." },
+					"lineField": { "type": "string", "description": "The line's foreign key to the header." },
+					"lockedLineFields": { "type": "array", "items": { "type": "string" }, "minItems": 1, "description": "Line fields a closed period freezes; [\"*\"] for the whole row. Required with lineEntity." }
+				},
+				"additionalProperties": false
+			}
+		},
 		"accumulation": {
 			"$ref": "#/$defs/accumulationConfig",
 			"description": "Accumulation registry configuration (simple document without lines). Requires 'accumulation' trait."

package/resources/schemas/roles.schema.json

@@ -18,11 +18,14 @@
 				},
 				"rights": {
 					"type": "object",
-					"description": "Entity rights: entity code → rights string",
+					"description": "Security object → rights string. Keys are PREFIX-NAMESPACED so an action and an entity may share a code: a bare key is an entity code in this module ('invoice'), 'module.entity' is an entity owned by a module this one depends on ('parties.party'), 'action:<action_cd>' is an action from this module's ui/actions.json, and 'sp:<sp_cd>' is a stored procedure from logic/stored_procedures.json ('sp:module.sp_cd' for a dependency's), and 'report:<report_cd>' is a report from ui/reports.json ('report:module.report_cd' for a dependency's). A grant on an action written WITHOUT the 'action:' prefix is read as an entity code, resolves to nothing, and is silently dropped at install — action.execute then returns PERMISSION_DENIED.",
+					"propertyNames": {
+						"pattern": "^(action:[A-Za-z_][A-Za-z0-9_-]*|(sp|report):([A-Za-z_][A-Za-z0-9_-]*\\.)?[A-Za-z_][A-Za-z0-9_-]*|([A-Za-z_][A-Za-z0-9_-]*\\.)?[A-Za-z_][A-Za-z0-9_-]*)$"
+					},
 					"additionalProperties": {
 						"type": "string",
 						"pattern": "^[SIUDCE]*$",
-						"description": "Rights: S=Select, I=Insert, U=Update, D=Delete, C=Clone, E=Execute"
+						"description": "Rights: S=Select, I=Insert, U=Update, D=Delete, C=Clone, E=Execute. Entity objects take any of SIUDC; actions, stored procedures and reports take E."
 					}
 				}
 			},