@enfyra/mcp-server 0.1.18 → 0.1.19

package/dist/mcp-server-entry.js

@@ -26,7 +26,7 @@ import { WORKFLOW_SURFACES, discoverWorkflowRoutes } from './lib/tool-routing.js
 import { getSupportedColumnTypesFromMetadata, registerTableTools } from './lib/table-tools.js';
 import { registerPlatformOperationTools, validateExtensionCode } from './lib/platform-operation-tools.js';
 import { registerRuntimeZoneTools } from './lib/runtime-zone-tools.js';
-import { parseRecordData, prepareRecordMutation, validateScriptSourceIfPresent } from './lib/mutation-guards.js';
+import { parseRecordBatchData, parseRecordData, prepareRecordBatchMutation, prepareRecordMutation, validateScriptSourceIfPresent } from './lib/mutation-guards.js';
 import { assertDynamicCodeKnowledgeAck, assertDynamicCodeKnowledgeAckIf, assertExtensionKnowledgeAckIf, assertGlobalRulesAck, buildRequiredKnowledgePayload, dynamicCodeKnowledgeAckParam, extensionKnowledgeAckParam, globalRulesAckParam, } from './lib/required-knowledge.js';
 import { validateMainTableRoutePath } from './lib/route-guards.js';
 import { installColumnarToolFormatter, jsonContent } from './lib/response-format.js';
@@ -558,11 +558,28 @@ async function prepareGenericMutation(tableName, data) {
         data,
     });
 }
+async function prepareGenericBatchMutation(tableName, records) {
+    const { tables } = await getMetadataTables();
+    return prepareRecordBatchMutation({
+        fetchAPI,
+        apiUrl: ENFYRA_API_URL,
+        tables,
+        tableName,
+        records,
+    });
+}
 function assertKnowledgeForGenericMutation(tableName, data, { knowledgeAckKey, extensionKnowledgeAckKey }) {
     const payload = parseRecordData(data);
     assertDynamicCodeKnowledgeAckIf(SCRIPT_BACKED_TABLE_SET.has(tableName) && typeof payload.sourceCode === 'string', knowledgeAckKey);
     assertExtensionKnowledgeAckIf(tableName === 'enfyra_extension' && typeof payload.code === 'string', extensionKnowledgeAckKey);
 }
+function assertKnowledgeForGenericBatchMutation(tableName, records, { knowledgeAckKey, extensionKnowledgeAckKey }) {
+    const payloads = parseRecordBatchData(records);
+    for (const payload of payloads) {
+        assertDynamicCodeKnowledgeAckIf(SCRIPT_BACKED_TABLE_SET.has(tableName) && typeof payload.sourceCode === 'string', knowledgeAckKey);
+        assertExtensionKnowledgeAckIf(tableName === 'enfyra_extension' && typeof payload.code === 'string', extensionKnowledgeAckKey);
+    }
+}
 async function validateExtensionCodeForGenericMutation(tableName, payload, fallbackName) {
     if (tableName !== 'enfyra_extension' || typeof payload?.code !== 'string')
         return null;
@@ -844,7 +861,7 @@ server.tool('discover_enfyra_system', [
             publicAccess: 'publicMethods controls anonymous REST access per route/method; otherwise Bearer JWT + routePermissions apply.',
             routeTables: sample(routeTableList),
             noRouteTables: sample(noRouteTableList),
-            canonicalCrudTools: 'query_table/create_record/update_record/delete_record use dynamic REST routes and only work for route-backed tables.',
+            canonicalCrudTools: 'query_table/create_record/create_records/update_record/delete_record use dynamic REST routes and only work for route-backed tables. create_record is single-object only; create_records accepts an array, preflights every item against live metadata, then posts sequentially.',
             customRouteWorkflow: 'For a new endpoint use create_route without mainTableId, then create_handler/create_pre_hook/create_post_hook. Do not create a table just to get a path.',
             routeSamples: sample(routes, 25),
             detailHint: 'Use get_all_routes({ search, limit }) or inspect_route({ path }) for route details. Use inspect_table({ tableName }) for table detail.',
@@ -1362,9 +1379,9 @@ server.tool('find_one_record', 'Find a single record by ID or filter. By ID uses
 // ============================================================================
 // CRUD TOOLS
 // ============================================================================
-server.tool('create_record', 'Create a new record in any route-backed table. The tool validates body keys against live metadata, validates sourceCode before saving script-backed records, and validates enfyra_extension.code before saving extension records.', {
+server.tool('create_record', 'Create exactly one record in a route-backed table. Pass a single JSON object, not an array. The tool preflights body keys against live metadata before POST, validates sourceCode before saving script-backed records, and validates enfyra_extension.code before saving extension records. For multiple records, use create_records.', {
     tableName: z.string().describe('Table name to insert into'),
-    data: z.string().describe('Record data as JSON string'),
+    data: z.string().describe('Single record data as a JSON object string. Arrays are intentionally rejected; use create_records for batch seeding.'),
     queryParams: z.string().optional().describe('Optional query params as JSON object string, e.g. {"expired_at":"2026-09-20"}. Use for route contracts that intentionally keep workflow fields out of the validated body.'),
     globalRulesAckKey: globalRulesAckParam(z),
     knowledgeAckKey: dynamicCodeKnowledgeAckParam(z).optional().describe('Required only when data contains sourceCode. Use dynamicCodeAckKey from get_enfyra_required_knowledge.'),
@@ -1383,6 +1400,52 @@ server.tool('create_record', 'Create a new record in any route-backed table. The
                     extensionValidation,
                 }, null, 2) }] };
 });
+server.tool('create_records', 'Create multiple records in one MCP call for route-backed table seeding. Pass a JSON array string. MCP preflights every item against live metadata first, then sends one POST per record sequentially; this is not a backend bulk endpoint or transaction.', {
+    tableName: z.string().describe('Table name to insert into'),
+    records: z.string().describe('Records as a JSON array string. Each item must be a JSON object using metadata-backed column names and relation propertyName values.'),
+    queryParams: z.string().optional().describe('Optional query params as JSON object string applied to every POST, for route contracts that intentionally keep workflow fields out of the validated body.'),
+    maxRecords: z.number().int().min(1).max(100).optional().default(100).describe('Safety cap for one MCP batch. Default/max is 100. For larger imports, split intentionally.'),
+    globalRulesAckKey: globalRulesAckParam(z),
+    knowledgeAckKey: dynamicCodeKnowledgeAckParam(z).optional().describe('Required only when any item contains sourceCode. Use dynamicCodeAckKey from get_enfyra_required_knowledge.'),
+    extensionKnowledgeAckKey: extensionKnowledgeAckParam(z).optional().describe('Required only when tableName is enfyra_extension and any item contains code. Use extensionAckKey from get_enfyra_required_knowledge.'),
+}, async ({ tableName, records, queryParams, maxRecords, globalRulesAckKey, knowledgeAckKey, extensionKnowledgeAckKey }) => {
+    assertGlobalRulesAck(globalRulesAckKey);
+    validateTableName(tableName);
+    const parsedRecords = parseRecordBatchData(records);
+    if (parsedRecords.length > maxRecords) {
+        throw new Error(`create_records received ${parsedRecords.length} records, above maxRecords=${maxRecords}. Split the batch deliberately.`);
+    }
+    assertKnowledgeForGenericBatchMutation(tableName, parsedRecords, { knowledgeAckKey, extensionKnowledgeAckKey });
+    const prepared = await prepareGenericBatchMutation(tableName, parsedRecords);
+    const extensionValidations = [];
+    for (const item of prepared.records) {
+        extensionValidations.push(await validateExtensionCodeForGenericMutation(tableName, item.payload, item.payload?.name || item.index));
+    }
+    const query = parseQueryParamsArg(queryParams);
+    const created = [];
+    for (const item of prepared.records) {
+        const result = await fetchAPI(ENFYRA_API_URL, appendQuery(`/${tableName}`, query), { method: 'POST', body: JSON.stringify(item.payload) });
+        created.push({
+            index: item.index,
+            ...summarizeMutationResult(result, 'created', tableName),
+        });
+    }
+    return { content: [{ type: 'text', text: JSON.stringify({
+                    action: 'created_records',
+                    tableName,
+                    requested: parsedRecords.length,
+                    createdCount: created.length,
+                    sequential: true,
+                    transactional: false,
+                    preflight: {
+                        liveMetadataFieldsValidated: true,
+                        scriptValidatedBeforeAnyPost: prepared.records.some((item) => item.scriptValidation?.validated === true),
+                        extensionValidatedBeforeAnyPost: extensionValidations.some(Boolean),
+                    },
+                    created,
+                    detailHint: `Use query_table({ tableName: "${tableName}", fields: [...], limit: ${Math.min(created.length, 20)} }) to inspect created records when needed.`,
+                }, null, 2) }] };
+});
 server.tool('update_record', 'Update an existing record by ID using PATCH. The tool validates body keys against live metadata, validates sourceCode before saving script-backed records, and validates enfyra_extension.code before saving extension records. Prefer update_extension_code for normal extension edits.', {
     tableName: z.string().describe('Table name'),
     id: z.string().describe('Record ID to update'),