@enfyra/mcp-server 0.1.1 → 0.1.2

package/README.md

@@ -257,6 +257,7 @@ The MCP server includes safety guards for LLM callers:
 - `validate_extension_code` checks Enfyra admin extension code through `/enfyra_extension/preview` without saving.
 - Dynamic script guidance distinguishes secure repositories (`@REPOS.main`, `@REPOS.secure.<table>`) from trusted internal repositories (`@REPOS.<table>`), and tells agents not to return raw trusted records to users.
 - `compiledCode` is generated from `sourceCode` and may differ textually because macros are expanded; the MCP server never accepts hand-written `compiledCode`.
+- Long source/code values in read responses are written to `/tmp/enfyra-mcp-sources` and returned as length/hash/preview/tmpFile metadata so LLM callers can inspect full source from the file path without truncating tool output.
 - JSON responses include `compressionStats` with estimated token savings. Arrays of objects are converted to columnar form only when the compact shape is smaller than raw JSON.
 - Relation tools reject physical FK/junction names and resolve table ids from exact table names or aliases before schema mutation.
 - Generated code should use relation property names such as `conversation`, `sender`, and `member` instead of physical FK fields such as `conversationId`, `senderId`, or `memberId`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enfyra/mcp-server",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "MCP server for Enfyra - manage Enfyra instances from MCP-compatible coding tools",
   "type": "module",
   "license": "MIT",

package/src/lib/source-artifacts.js

@@ -0,0 +1,82 @@
+import { createHash } from 'node:crypto';
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+
+const DEFAULT_PREVIEW_CHARS = 1200;
+const DEFAULT_INLINE_LIMIT = 1400;
+const SOURCE_FIELD_NAMES = new Set([
+  'sourceCode',
+  'code',
+  'compiledCode',
+  'handlerScript',
+  'connectionHandlerScript',
+]);
+
+function sha256(value) {
+  return createHash('sha256').update(String(value), 'utf8').digest('hex');
+}
+
+function safePart(value) {
+  const source = String(value || 'source').trim();
+  return source.replace(/[^a-zA-Z0-9._-]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 80) || 'source';
+}
+
+function extensionForField(fieldName) {
+  if (fieldName === 'code') return '.vue';
+  return '.js';
+}
+
+export function writeSourceArtifact({ tableName, id, fieldName, source }) {
+  const hash = sha256(source);
+  const dir = join(tmpdir(), 'enfyra-mcp-sources');
+  mkdirSync(dir, { recursive: true, mode: 0o700 });
+  const fileName = [
+    safePart(tableName),
+    safePart(id),
+    safePart(fieldName),
+    hash.slice(0, 12),
+  ].join('-') + extensionForField(fieldName);
+  const path = join(dir, fileName);
+  writeFileSync(path, source, { mode: 0o600 });
+  return {
+    tmpFile: path,
+    length: source.length,
+    sha256: hash,
+    preview: source.length > DEFAULT_PREVIEW_CHARS
+      ? `${source.slice(0, DEFAULT_PREVIEW_CHARS)}...`
+      : source,
+  };
+}
+
+export function compactSourceField({ tableName, id, fieldName, source, alwaysWrite = false }) {
+  if (typeof source !== 'string') return source;
+  if (!alwaysWrite && source.length <= DEFAULT_INLINE_LIMIT) return source;
+  return writeSourceArtifact({ tableName, id, fieldName, source });
+}
+
+export function compactSourceFields(value, { tableName, idField = 'id', alwaysWrite = false } = {}) {
+  if (Array.isArray(value)) {
+    return value.map((item) => compactSourceFields(item, { tableName, idField, alwaysWrite }));
+  }
+  if (!value || typeof value !== 'object') return value;
+
+  const recordId = value[idField] ?? value._id ?? value.id ?? 'record';
+  const out = {};
+  for (const [key, fieldValue] of Object.entries(value)) {
+    if (SOURCE_FIELD_NAMES.has(key) && typeof fieldValue === 'string') {
+      out[key] = compactSourceField({
+        tableName,
+        id: recordId,
+        fieldName: key,
+        source: fieldValue,
+        alwaysWrite,
+      });
+    } else if (fieldValue && typeof fieldValue === 'object') {
+      out[key] = compactSourceFields(fieldValue, { tableName, idField, alwaysWrite });
+    } else {
+      out[key] = fieldValue;
+    }
+  }
+  return out;
+}

package/src/mcp-server-entry.mjs

@@ -33,6 +33,7 @@ import {
 } from './lib/required-knowledge.js';
 import { validateMainTableRoutePath } from './lib/route-guards.js';
 import { installColumnarToolFormatter, jsonContent } from './lib/response-format.js';
+import { compactSourceFields, writeSourceArtifact } from './lib/source-artifacts.js';
 import {
   findRoutePermission,
   mergeMethodNames,
@@ -1357,7 +1358,7 @@ server.tool('query_table', 'Query any route-backed table. Response is minimal un
     },
     minimalDefaultApplied: !(fields && fields.length > 0),
     meta: result?.meta,
-    data: result?.data || [],
+    data: compactSourceFields(result?.data || [], { tableName }),
     detailHint: fields && fields.length > 0
       ? undefined
       : 'Only the primary key was returned because fields was omitted. Re-run query_table with explicit fields for details, or use inspect_table to find valid field names.',
@@ -1438,7 +1439,7 @@ server.tool(
         tableName,
         primaryKey,
         fields: selectedFields,
-        data: one,
+        data: compactSourceFields(one, { tableName }),
         detailHint: fields && fields.length > 0 ? undefined : 'Only the primary key was returned. Pass fields for details.',
       }, null, 2) }] };
     }
@@ -1456,7 +1457,7 @@ server.tool(
     return { content: [{ type: 'text', text: JSON.stringify({
       tableName,
       fields: selectedFields,
-      data: result.data?.[0] || null,
+      data: compactSourceFields(result.data?.[0] || null, { tableName }),
       detailHint: fields && fields.length > 0 ? undefined : 'Only the primary key was returned. Pass fields for details.',
     }, null, 2) }] };
   },
@@ -1515,12 +1516,14 @@ server.tool(
   },
   async ({ tableName, id }) => {
     const { primaryKey, record, sourceField, sourceCode } = await fetchScriptRecord(tableName, id);
+    const sourceArtifact = writeSourceArtifact({ tableName, id, fieldName: sourceField, source: sourceCode });
     return { content: [{ type: 'text', text: JSON.stringify({
       tableName,
       id,
       primaryKey,
       sourceField,
-      sourceCode,
+      sourceFile: sourceArtifact.tmpFile,
+      sourcePreview: sourceArtifact.preview,
       sourceLength: sourceCode.length,
       sourceSha256: sha256(sourceCode),
       scriptLanguage: record.scriptLanguage || record.language || null,