@dypai-ai/mcp 1.5.0 → 1.5.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dypai-ai/mcp",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "DYPAI MCP Server — AI agent toolkit for building and deploying full-stack apps",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -201,15 +201,10 @@ NOTE: user IDs are TEXT (better-auth nanoids like "G1LIBXsbMLxUrs99ebCaL9X4auxW2
         sort_order:        { type: "string", enum: ["asc", "desc"], description: "Sort direction (default 'desc'). Optional for: list." },
       },
       required: ["operation"],
-      allOf: [
-        { if: { properties: { operation: { const: "get" } },          required: ["operation"] }, then: { required: ["user_id"] } },
-        { if: { properties: { operation: { const: "create" } },       required: ["operation"] }, then: { required: ["email", "password"] } },
-        { if: { properties: { operation: { const: "set_password" } }, required: ["operation"] }, then: { required: ["user_id", "password"] } },
-        { if: { properties: { operation: { const: "update_role" } },  required: ["operation"] }, then: { required: ["user_id", "role"] } },
-        { if: { properties: { operation: { const: "delete" } },       required: ["operation"] }, then: { required: ["user_id"] } },
-        { if: { properties: { operation: { const: "ban" } },          required: ["operation"] }, then: { required: ["user_id"] } },
-        { if: { properties: { operation: { const: "unban" } },        required: ["operation"] }, then: { required: ["user_id"] } },
-      ],
+      // NOTE: Anthropic's API rejects `oneOf`, `allOf`, `anyOf` at the top
+      // level of a tool input_schema. Per-operation required-field checks
+      // are enforced inside the tool's execute() (see description for the
+      // contract). Do not re-add the allOf block.
     },
   },
 
@@ -234,11 +229,8 @@ Operations:
         permissions: { type: "object", description: "JSON of role flags. Keys: manage_users, manage_roles, manage_system. Optional for: create, update." },
       },
       required: ["operation"],
-      allOf: [
-        { if: { properties: { operation: { const: "create" } }, required: ["operation"] }, then: { required: ["name"] } },
-        { if: { properties: { operation: { const: "update" } }, required: ["operation"] }, then: { required: ["role_id"] } },
-        { if: { properties: { operation: { const: "delete" } }, required: ["operation"] }, then: { required: ["role_id"] } },
-      ],
+      // Anthropic API does not allow allOf/oneOf/anyOf at the top level of
+      // a tool input_schema; per-operation required fields validated in execute().
     },
   },
 
@@ -285,10 +277,8 @@ Typical flow:
         resource_names: { type: "array", items: { type: "string" }, description: "Optional. For discard: scope to drafts whose resource_name matches one of these. Ignored by list/publish." },
       },
       required: ["operation"],
-      allOf: [
-        { if: { properties: { operation: { const: "publish" } }, required: ["operation"] }, then: { required: ["confirm"] } },
-        { if: { properties: { operation: { const: "discard" } }, required: ["operation"] }, then: { required: ["confirm"] } },
-      ],
+      // Anthropic API does not allow allOf/oneOf/anyOf at the top level of a
+      // tool input_schema. Per-operation required fields validated in execute().
     },
   },
 
@@ -355,14 +345,8 @@ Notes:
         offset:  { type: "integer", description: "Pagination offset. Default 0." },
       },
       required: [],
-      allOf: [
-        { if: { properties: { operation: { const: "create" } },                  required: ["operation"] }, then: { required: ["name"] } },
-        { if: { properties: { operation: { const: "delete" } },                  required: ["operation"] }, then: { required: ["name"] } },
-        { if: { properties: { operation: { const: "upload_file" } },             required: ["operation"] }, then: { required: ["bucket", "local_path"] } },
-        { if: { properties: { operation: { const: "list_objects" } },            required: ["operation"] }, then: { required: ["bucket"] } },
-        { if: { properties: { operation: { const: "delete_object" } },           required: ["operation"] }, then: { required: ["bucket", "name"] } },
-        { if: { properties: { operation: { const: "get_signed_download_url" } }, required: ["operation"] }, then: { required: ["bucket", "name"] } },
-      ],
+      // Anthropic API does not allow allOf/oneOf/anyOf at the top level of a
+      // tool input_schema. Per-operation required fields validated in execute().
     },
   },
 
@@ -401,12 +385,8 @@ and \`dypai_push\`. This tool does NOT modify the schedule definition.`,
         offset:        { type: "integer", description: "Pagination offset. Optional for: list, history. Default 0." },
       },
       required: ["operation"],
-      allOf: [
-        { if: { properties: { operation: { const: "get" } },     required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "pause" } },   required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "resume" } },  required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "history" } }, required: ["operation"] }, then: { required: ["endpoint_name"] } },
-      ],
+      // Anthropic API does not allow allOf/oneOf/anyOf at the top level of a
+      // tool input_schema. Per-operation required fields validated in execute().
     },
   },
 
@@ -448,14 +428,8 @@ endpoint YAML and \`dypai_push\`. This tool does NOT modify the definition.`,
         test_headers:  { type: "object", description: "Extra headers to attach to the synthetic call. Optional for: test." },
       },
       required: ["operation"],
-      allOf: [
-        { if: { properties: { operation: { const: "get" } },           required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "pause" } },         required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "resume" } },        required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "history" } },       required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "test" } },          required: ["operation"] }, then: { required: ["endpoint_name"] } },
-        { if: { properties: { operation: { const: "rotate_secret" } }, required: ["operation"] }, then: { required: ["endpoint_name"] } },
-      ],
+      // Anthropic API does not allow allOf/oneOf/anyOf at the top level of a
+      // tool input_schema. Per-operation required fields validated in execute().
     },
   },
 
@@ -489,6 +463,46 @@ endpoint YAML and \`dypai_push\`. This tool does NOT modify the definition.`,
 
 const SERVER_INSTRUCTIONS = `You are building full-stack applications on the DYPAI platform. You handle BACKEND (workflow endpoints, database, auth, realtime) and FRONTEND (SDK integration, React/Vite/Next code).
 
+# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+# BEFORE YOU DO ANYTHING — materialize the project locally
+# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+**This is the single biggest failure mode. Read it even if you skip everything else.**
+
+A DYPAI project lives in THREE places:
+1. The platform (remote DB, engine, deployed frontend).
+2. Your agent host's workspace (local files on disk — \`dypai/\` backend + \`src/\`/\`package.json\` frontend).
+3. The user's head ("I want to change X").
+
+**You can only edit what's on disk.** No workspace files = you're blind. Tools like \`execute_sql\`, \`dypai_push\`, and frontend edits assume the local files exist; running them against a workspace that hasn't been synced produces broken or imaginary output. This is the #1 source of wasted sessions.
+
+## The checklist — run this at the start of EVERY conversation that mentions an existing project or a just-created one
+
+Before the first \`execute_sql\`, before the first file edit, before ANYTHING:
+
+1. **Look at the workspace.** Is there a \`dypai/\` folder? A \`src/\`? A \`package.json\`? If you're using a Read/ls tool, check now.
+2. **Missing backend (\`dypai/\` absent)?** You have no endpoint YAMLs, no \`schema.sql\`, no node catalog. Cannot write queries, cannot push, cannot reason about the schema.
+3. **Missing frontend (\`src/\` or \`package.json\` absent)?** You have no React/Vite/Next code. Cannot change the UI, cannot run \`npm install\`, cannot test locally.
+4. **If either is missing → sync FIRST:**
+   - Ask the user for an absolute workspace path if you don't have one (e.g. \`/Users/me/code/my-app\`).
+   - Run \`dypai_pull(project_id, out_dir: <abs>/dypai)\` — materializes backend (endpoints, SQL, prompts, schema.sql, node-catalog.json).
+   - Run \`manage_frontend(operation:"sync", project_id, targetDirectory: <abs>)\` — materializes frontend (React/Vite/Next source + \`.env.local\`).
+   - Run both — they're independent. The user may only have asked about one, but you'll probably need the other for context.
+5. **Only then start editing.**
+
+## Same applies after \`create_project\`
+
+A freshly created project has **zero** local files. The create response gives you \`project_id\` and URLs, nothing else. The workspace is empty until you pull + sync. Do NOT start writing code, do NOT call \`execute_sql\` — the response may say "next_step: run dypai_pull" but run BOTH pull AND frontend sync, not just the backend.
+
+## Symptoms that mean "I didn't materialize properly"
+
+- User: *"Change the login button color"* and you start with \`execute_sql\`. Stop. Check \`src/\`. If missing, sync frontend.
+- User: *"Why doesn't this endpoint work?"* and you have no \`dypai/endpoints/\`. Stop. Pull backend.
+- You catch yourself "remembering" an endpoint from a previous conversation. Memory is not a tool. Pull first, then read from disk.
+- You're about to edit a file but \`dypai/schema.sql\` doesn't exist. You don't know the schema. Pull first.
+
+**Rule of thumb: if you can't \`Read\` it from disk, you can't touch it. Sync before you guess.**
+
 # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 # TALKING TO THE USER — plain language, not tool names
 # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

package/src/tools/manage-database.js

@@ -512,18 +512,8 @@ export const manageDatabaseTool = {
       },
     },
     required: ["operation"],
-    allOf: [
-      { if: { properties: { operation: { const: "apply_migration" } }, required: ["operation"] },
-        then: { required: ["migration_file"] } },
-      { if: { properties: { operation: { const: "introspect_schema" } }, required: ["operation"] },
-        then: { required: ["name"] } },
-      { if: { properties: { operation: { const: "introspect_table" } }, required: ["operation"] },
-        then: { required: ["name"] } },
-      { if: { properties: { operation: { const: "introspect_function" } }, required: ["operation"] },
-        then: { required: ["name"] } },
-      { if: { properties: { operation: { const: "execute_script" } }, required: ["operation"] },
-        then: { required: ["sql"] } },
-    ],
+    // Anthropic API does not allow allOf/oneOf/anyOf at the top level of a
+    // tool input_schema. Per-operation required fields validated in execute().
   },
 
   async execute(args = {}) {