@enfyra/mcp-server 0.1.62 → 0.1.64

package/dist/lib/session-safety.js

@@ -0,0 +1,89 @@
+const DESTRUCTIVE_TOOLS = new Set([
+    'delete_records',
+    'delete_tables',
+    'delete_columns',
+    'delete_relations',
+    'delete_method',
+    'delete_route',
+]);
+const MUTATION_TOOL_PATTERN = /^(?:create|update|delete|ensure|patch|install|enable|disable|reorder|reload|trigger|set|add|remove)_/;
+const MUTATION_TOOLS = new Set([
+    'api_endpoint_workflow',
+    'extension_workflow',
+    'flow_workflow',
+    'public_route_methods',
+    'private_route_methods',
+    'replace_route_methods',
+    'run_admin_test',
+    'test_flow_step',
+    'test_graphql',
+    'test_rest_endpoint',
+]);
+const PREVIEW_IGNORED_KEYS = new Set([
+    'confirm',
+    'expectedPath',
+    'globalRulesAckKey',
+    'maxItems',
+    'skipNotFound',
+]);
+const ID_KEYS = new Set(['id', '_id', 'columnId', 'flowId', 'relationId', 'routeId', 'tableId']);
+let targetConfirmed = false;
+const destructivePreviews = new Set();
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function normalizeFingerprintValue(value, key) {
+    if (Array.isArray(value))
+        return value.map((entry) => normalizeFingerprintValue(entry));
+    if (isRecord(value)) {
+        return Object.fromEntries(Object.keys(value)
+            .filter((entryKey) => !PREVIEW_IGNORED_KEYS.has(entryKey))
+            .sort()
+            .map((entryKey) => [entryKey, normalizeFingerprintValue(value[entryKey], entryKey)]));
+    }
+    if (key && ID_KEYS.has(key) && value !== undefined && value !== null)
+        return String(value);
+    return value;
+}
+function destructivePreviewKey(toolName, input) {
+    return `${toolName}:${JSON.stringify(normalizeFingerprintValue(input))}`;
+}
+function isMutationTool(toolName) {
+    return MUTATION_TOOL_PATTERN.test(toolName) || MUTATION_TOOLS.has(toolName);
+}
+export function resetMcpSafetySession() {
+    targetConfirmed = false;
+    destructivePreviews.clear();
+}
+export function getMcpSafetySessionState() {
+    return {
+        targetConfirmed,
+        destructivePreviewCount: destructivePreviews.size,
+    };
+}
+export function beforeMcpToolExecution(toolName, input = {}) {
+    if (isMutationTool(toolName) && !targetConfirmed) {
+        throw new Error(`Target is not confirmed for this MCP process session. Call get_enfyra_api_context before ${toolName}, verify the API base, then retry.`);
+    }
+    if (DESTRUCTIVE_TOOLS.has(toolName) && input.confirm === true) {
+        const key = destructivePreviewKey(toolName, input);
+        if (!destructivePreviews.has(key)) {
+            throw new Error(`Missing matching destructive preview for ${toolName}. Call the same tool first with confirm=false, inspect the preview, then retry with confirm=true in this MCP process session.`);
+        }
+    }
+}
+export function afterMcpToolExecution(toolName, input = {}) {
+    if (toolName === 'get_enfyra_api_context') {
+        targetConfirmed = true;
+        return;
+    }
+    if (!DESTRUCTIVE_TOOLS.has(toolName))
+        return;
+    const key = destructivePreviewKey(toolName, input);
+    if (input.confirm === true) {
+        destructivePreviews.delete(key);
+        return;
+    }
+    destructivePreviews.add(key);
+}
+//# sourceMappingURL=session-safety.js.map

package/dist/lib/session-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-safety.js","sourceRoot":"","sources":["../../src/lib/session-safety.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,sGAAsG,CAAC;AACrI,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,uBAAuB;IACvB,oBAAoB;IACpB,eAAe;IACf,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,gBAAgB;IAChB,gBAAgB;IAChB,cAAc;IACd,oBAAoB;CACrB,CAAC,CAAC;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,SAAS;IACT,cAAc;IACd,mBAAmB;IACnB,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjG,IAAI,eAAe,GAAG,KAAK,CAAC;AAC5B,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,GAAY;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aACf,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;aACzD,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,KAAgB;IAC/D,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,eAAe,GAAG,KAAK,CAAC;IACxB,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,eAAe;QACf,uBAAuB,EAAE,mBAAmB,CAAC,IAAI;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAmB,EAAE;IAC5E,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,4FAA4F,QAAQ,oCAAoC,CAAC,CAAC;IAC5J,CAAC;IACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,+HAA+H,CAAC,CAAC;QACvM,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAmB,EAAE;IAC3E,IAAI,QAAQ,KAAK,wBAAwB,EAAE,CAAC;QAC1C,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC7C,MAAM,GAAG,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC3B,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/lib/source-artifacts.js

@@ -2,7 +2,7 @@ import { createHash } from 'node:crypto';
 import { mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
-const DEFAULT_PREVIEW_CHARS = 1200;
+const DEFAULT_PREVIEW_CHARS = 480;
 const DEFAULT_INLINE_LIMIT = 1400;
 const SOURCE_FIELD_NAMES = new Set([
     'sourceCode',
@@ -21,6 +21,8 @@ function safePart(value) {
 function extensionForField(fieldName) {
     if (fieldName === 'code')
         return '.vue';
+    if (fieldName.endsWith('.diff') || fieldName === 'diff')
+        return '.diff';
     return '.js';
 }
 export function writeSourceArtifact({ tableName, id, fieldName, source }) {

package/dist/lib/source-artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-artifacts.js","sourceRoot":"","sources":["../../src/lib/source-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,YAAY;IACZ,MAAM;IACN,cAAc;IACd,eAAe;IACf,yBAAyB;CAC1B,CAAC,CAAC;AAeH,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;AACnG,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAuB;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG;QACf,QAAQ,CAAC,SAAS,CAAC;QACnB,QAAQ,CAAC,EAAE,CAAC;QACZ,QAAQ,CAAC,SAAS,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KAClB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,qBAAqB;YAC5C,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,KAAK;YAChD,CAAC,CAAC,MAAM;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,KAAK,EAAmD;IAC3I,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,IAAI,oBAAoB;QAAE,OAAO,MAAM,CAAC;IACzE,OAAO,mBAAmB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,EAAE,WAAW,GAAG,KAAK,KAAiC,EAAE;IACrI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEtD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC;IAChF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClE,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC;gBAC5B,SAAS;gBACT,EAAE,EAAE,QAAQ;gBACZ,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"source-artifacts.js","sourceRoot":"","sources":["../../src/lib/source-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,YAAY;IACZ,MAAM;IACN,cAAc;IACd,eAAe;IACf,yBAAyB;CAC1B,CAAC,CAAC;AAeH,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;AACnG,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAuB;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG;QACf,QAAQ,CAAC,SAAS,CAAC;QACnB,QAAQ,CAAC,EAAE,CAAC;QACZ,QAAQ,CAAC,SAAS,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KAClB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,qBAAqB;YAC5C,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,KAAK;YAChD,CAAC,CAAC,MAAM;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,KAAK,EAAmD;IAC3I,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,IAAI,oBAAoB;QAAE,OAAO,MAAM,CAAC;IACzE,OAAO,mBAAmB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,EAAE,WAAW,GAAG,KAAK,KAAiC,EAAE;IACrI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEtD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC;IAChF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClE,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC;gBAC5B,SAAS;gBACT,EAAE,EAAE,QAAQ;gBACZ,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/table-tools.d.ts

@@ -29,6 +29,7 @@ type RelationPatch = AnyRecord & {
     onDelete?: string;
     description?: string;
 };
+export declare function assertColumnContractBroadening(existingColumn: AnyRecord, requested: AnyRecord, toolset?: string): string[];
 export declare function buildPrimaryColumnForDbType(dbType: string | null | undefined): ColumnPatch;
 export declare function normalizeTablesFromMetadata(metadata: any): any[];
 export declare function resolveTableFromMetadata(metadata: any, tableId: any): any;
@@ -40,6 +41,11 @@ export declare function resolveTableIdentifierFromMetadata(metadata: any, tableR
  * complete permission-projected schema from /metadata/:name.
  */
 export declare function fetchTableWithDetails(ENFYRA_API_URL: any, tableId: any): Promise<AnyRecord>;
+export declare function normalizeCreateTableDefinitions(items: AnyRecord[]): {
+    _requestedTableName?: string;
+    relations?: any;
+    name: string;
+}[];
 export declare function computeBatchCleanupOrder(items: AnyRecord[]): string[];
 export declare function assertIndexesDoNotReferenceUniqueFields(indexes: ConstraintGroup[], uniques: ConstraintGroup[]): void;
 export declare function normalizeRelationForTablePatch(relation: AnyRecord): RelationPatch;
@@ -75,5 +81,7 @@ export declare function buildColumnDefinition({ name, type, supportedTypes, isNu
 /**
  * Register table tools with MCP server
  */
-export declare function registerTableTools(server: any, ENFYRA_API_URL: any): void;
+export declare function registerTableTools(server: any, ENFYRA_API_URL: any, options?: {
+    toolset?: string;
+}): void;
 export {};

package/dist/lib/table-tools.js

@@ -6,10 +6,22 @@ import { fetchAPI } from './fetch.js';
 import { fetchMetadataContext, fetchTableCatalog, fetchTableMetadata, resolveTableCatalogEntry, } from './metadata-client.js';
 import { jsonContent } from './response-format.js';
 import { assertGlobalRulesAck, globalRulesAckParam } from './required-knowledge.js';
+import { normalizeTableName } from './tool-input-normalization.js';
 function bulkObjectArrayParam(z, label) {
     return z.array(z.record(z.any())).describe(`${label} as a native JSON array of objects. Pass one object in the array for a single mutation.`);
 }
 let schemaQueue = Promise.resolve();
+export function assertColumnContractBroadening(existingColumn, requested, toolset = 'guided') {
+    const broadened = [];
+    if (existingColumn?.isUpdatable === false && requested?.isUpdatable === true)
+        broadened.push('isUpdatable false→true');
+    if (existingColumn?.isPublished === false && requested?.isPublished === true)
+        broadened.push('isPublished false→true');
+    if (broadened.length > 0 && (toolset !== 'full' || requested?.allowContractBroadening !== true)) {
+        throw new Error(`Column contract broadening is blocked in the guided toolset: ${broadened.join(', ')}. Do not broaden canonical metadata merely for a custom action or E2E fixture; use an exact trusted internal write after authorization instead. Expert full-toolset changes additionally require allowContractBroadening=true.`);
+    }
+    return broadened;
+}
 function withSchemaQueue(operation) {
     const run = schemaQueue.then(operation, operation);
     schemaQueue = run.catch(() => { });
@@ -283,6 +295,35 @@ function preflightCreateTableDefinitions(items) {
         }
     });
 }
+export function normalizeCreateTableDefinitions(items) {
+    const batchNameMap = new Map(items
+        .map((item) => String(item?.name ?? ''))
+        .filter(Boolean)
+        .map((name) => [name.toLowerCase(), normalizeTableName(name)]));
+    return items.map((item) => {
+        const originalName = String(item?.name ?? '');
+        const name = normalizeTableName(originalName);
+        const relations = Array.isArray(item?.relations)
+            ? item.relations.map((relation) => {
+                const target = relation?.targetTable ?? relation?.targetTableId;
+                if (typeof target !== 'string')
+                    return relation;
+                const normalizedTarget = batchNameMap.get(target.toLowerCase());
+                if (!normalizedTarget || normalizedTarget === target)
+                    return relation;
+                return relation?.targetTable !== undefined
+                    ? { ...relation, targetTable: normalizedTarget }
+                    : { ...relation, targetTableId: normalizedTarget };
+            })
+            : item?.relations;
+        return {
+            ...item,
+            name,
+            ...(relations !== undefined ? { relations } : {}),
+            ...(name !== originalName ? { _requestedTableName: originalName } : {}),
+        };
+    });
+}
 function relationTargetName(relation) {
     const target = relation?.targetTable ?? relation?.targetTableId;
     if (target && typeof target === 'object')
@@ -639,7 +680,8 @@ export function buildColumnDefinition({ name, type, supportedTypes, isNullable,
 /**
  * Register table tools with MCP server
  */
-export function registerTableTools(server, ENFYRA_API_URL) {
+export function registerTableTools(server, ENFYRA_API_URL, options = {}) {
+    const toolset = options.toolset || 'guided';
     const apiBase = ENFYRA_API_URL.replace(/\/$/, '');
     async function appendColumnToTable(args) {
         assertGlobalRulesAck(args.globalRulesAckKey);
@@ -861,6 +903,10 @@ export function registerTableTools(server, ENFYRA_API_URL) {
         const idColumn = buildPrimaryColumnForDbType(metadataContext.dbType);
         const { columns: userColumnsWithoutAuto, skippedAutoColumns } = stripAutoManagedColumns(userColumns);
         const { columns: normalizedUserColumns, normalizations } = normalizeColumnsForLiveMetadata(userColumnsWithoutAuto, supportedTypes);
+        const schemaNormalizations = [
+            ...(args._requestedTableName ? [{ field: 'name', from: args._requestedTableName, to: args.name, reason: 'Enfyra table names are lowercase.' }] : []),
+            ...normalizations,
+        ];
         const deferredRelations = arrayValue('relations', args.relations).map(normalizeRelationForTablePatch);
         const relationNames = new Set(deferredRelations.map((relation) => relation.propertyName).filter(Boolean));
         assertNoColumnRelationNameCollision(normalizedUserColumns.map((column) => String(column.name || '')).filter(Boolean), deferredRelations.map((relation) => String(relation.propertyName || '')).filter(Boolean), `create_tables item "${args.name}"`);
@@ -900,7 +946,7 @@ export function registerTableTools(server, ENFYRA_API_URL) {
                 uniqueGroupCount: uniques.length,
                 deferredConstraintCount: splitIndexes.deferred.length + splitUniques.deferred.length,
             },
-            schemaNormalization: normalizations,
+            schemaNormalization: schemaNormalizations,
             skippedAutoColumns,
             schema: {
                 intended: {
@@ -1029,7 +1075,7 @@ export function registerTableTools(server, ENFYRA_API_URL) {
             result,
         };
     }
-    async function updateOneColumn({ tableId, columnId, name, type, isNullable, isPublished, isUpdatable, defaultValue, description, options }) {
+    async function updateOneColumn({ tableId, columnId, name, type, isNullable, isPublished, isUpdatable, defaultValue, description, options, allowContractBroadening }) {
         const tableData = await fetchTableWithDetails(ENFYRA_API_URL, tableId);
         if (!tableData) {
             throw new Error(`Table with ID ${tableId} not found.`);
@@ -1039,6 +1085,12 @@ export function registerTableTools(server, ENFYRA_API_URL) {
         if (!beforeIds.includes(String(columnId))) {
             throw new Error(`Column ${columnId} was not found on table ${tableId}; refusing schema cascade patch.`);
         }
+        const existingColumn = existingColumns.find((column) => String(getId(column)) === String(columnId));
+        const contractBroadening = assertColumnContractBroadening(existingColumn || {}, {
+            isPublished,
+            isUpdatable,
+            allowContractBroadening,
+        }, toolset);
         const columns = existingColumns.map(col => {
             const rest = normalizeColumnForTablePatch(col);
             if (String(getId(col)) === String(columnId)) {
@@ -1070,6 +1122,7 @@ export function registerTableTools(server, ENFYRA_API_URL) {
             action: 'column_updated',
             tableId,
             columnId,
+            contractBroadening,
             result,
         };
     }
@@ -1230,7 +1283,7 @@ export function registerTableTools(server, ENFYRA_API_URL) {
         assertGlobalRulesAck(globalRulesAckKey);
         if (items !== undefined && tables !== undefined)
             throw new Error('Pass either items or tables to create_tables, not both.');
-        const parsedItems = parseBulkItemsParam('items', items ?? tables);
+        const parsedItems = normalizeCreateTableDefinitions(parseBulkItemsParam('items', items ?? tables));
         assertBulkLimit('create_tables', parsedItems, maxItems);
         preflightCreateTableDefinitions(parsedItems);
         const recordDeleteOrder = computeBatchCleanupOrder(parsedItems);
@@ -1300,9 +1353,16 @@ export function registerTableTools(server, ENFYRA_API_URL) {
                 recordRule: 'If you delete seeded records before deleting test tables, delete record batches sequentially in recordDeleteOrder; do not parallelize parent/child deletes.',
                 tableRule: 'For full test cleanup, prefer delete_tables with tableDeleteOrder after deleting custom routes/flows; table deletion removes the remaining table data.',
             },
-            created,
-            createdRelations,
-            appliedDeferredConstraints,
+            created: toolset === 'full' ? created : created.map(({ result, supportedColumnTypes, schema, ...item }) => ({
+                ...item,
+                schema: {
+                    intended: schema?.intended,
+                    liveMetadataAvailable: schema?.liveMetadataAvailable,
+                    liveMetadataError: schema?.liveMetadataError,
+                },
+            })),
+            createdRelations: toolset === 'full' ? createdRelations : createdRelations.map(({ result, responseFormat, ...item }) => item),
+            appliedDeferredConstraints: toolset === 'full' ? appliedDeferredConstraints : appliedDeferredConstraints.map(({ result, ...item }) => item),
         });
     });
     server.tool('update_tables', 'Update one or more table definitions. Always pass items as a native JSON array; for one table, pass one item. Items run sequentially through the schema queue.', {
@@ -1367,8 +1427,8 @@ export function registerTableTools(server, ENFYRA_API_URL) {
         }
         return jsonContent({ action: 'columns_created', requested: parsedItems.length, createdCount: created.length, sequential: true, created });
     });
-    server.tool('update_columns', 'Update one or more columns. Always pass items as a native JSON array; for one column, pass one item. Items run sequentially through the schema queue.', {
-        items: bulkObjectArrayParam(z, 'Column update items').describe('Native JSON array of column update items: [{ tableId, columnId, name?, type?, isNullable?, isPublished?, isUpdatable?, defaultValue?, description?, options? }].'),
+    server.tool('update_columns', 'Update one or more columns. Always pass items as a native JSON array; for one column, pass one item. Items run sequentially through the schema queue. Guided mode blocks isUpdatable/isPublished false→true broadening. Do not set isUpdatable=true merely to seed E2E data or let a custom action change a server-owned field; use an exact trusted internal write after authorization and preserve the canonical metadata contract.', {
+        items: bulkObjectArrayParam(z, 'Column update items').describe('Native JSON array of column update items: [{ tableId, columnId, name?, type?, isNullable?, isPublished?, isUpdatable?, defaultValue?, description?, options?, allowContractBroadening? }]. Guided mode blocks false→true isUpdatable/isPublished changes. Expert full mode requires allowContractBroadening=true; never use broadening only for custom-action writes or test fixtures.'),
         maxItems: z.number().int().min(1).max(100).optional().default(100).describe('Safety cap for one schema batch. Default/max is 100.'),
         globalRulesAckKey: globalRulesAckParam(z),
     }, async ({ items, maxItems, globalRulesAckKey }) => {