@enfyra/mcp-server 0.1.9 → 0.1.10

package/README.md

@@ -265,7 +265,7 @@ The MCP server includes safety guards for LLM callers:
 - Generated code should use relation property names such as `conversation`, `sender`, and `member` instead of physical FK fields such as `conversationId`, `senderId`, or `memberId`.
 - Custom route tools reject `mainTableId` unless the route is the canonical table route.
 - `discover_enfyra_workflows` maps task intent to workflow surfaces before the agent loads detailed examples or guesses between similar tools.
-- Platform operation tools such as `api_endpoint_workflow`, `extension_workflow`, `create_api_endpoint`, `enable_route`, `disable_route`, `delete_route`, `public_route_methods`, `add_route_methods`, `set_table_graphql`, `ensure_guard`, `ensure_field_permission`, `ensure_column_rule`, `ensure_websocket_event`, `choose_flow_step_tool`, fixed-type flow step tools, `ensure_menu`, `ensure_page_extension`, `ensure_global_extension`, and `ensure_widget_extension` resolve metadata ids and validate code before saving.
+- Platform operation tools such as `api_endpoint_workflow`, `extension_workflow`, `create_api_endpoint`, `enable_route`, `disable_route`, `delete_route`, `public_route_methods`, `add_route_methods`, `set_table_graphql`, `ensure_guard`, `ensure_field_permission`, `ensure_column_rule`, `ensure_websocket_event`, `choose_flow_step_tool`, fixed-type flow step tools, `ensure_menu`, `reorder_menus`, `ensure_page_extension`, `ensure_global_extension`, and `ensure_widget_extension` resolve metadata ids and validate code before saving.
 - Schema changes are serialized.
 - Destructive deletes return a preview before requiring `confirm=true`.
 
@@ -307,6 +307,8 @@ The MCP server exposes tools for workflow routing, metadata discovery, required
 
 Routes have two separate controls. `isEnabled` controls runtime registration: disabled routes return `404`. Use `enable_route` and `disable_route` for this lifecycle. `publicMethods` controls anonymous access for enabled routes; use `public_route_methods` and `private_route_methods` for that access boundary.
 
+Use `reorder_menus` for menu order or parent changes. It calls the Enfyra 2.2.6 `/admin/menu/reorder` operation route so hierarchy validation and menu cache invalidation are handled by the server instead of PATCHing individual `enfyra_menu` records.
+
 Admin app page paths and API paths are different surfaces. A page extension path such as `/cloud/projects/:id` is a UI route unless an enabled Enfyra API route with that exact path exists. Use `test_rest_endpoint` only for actual API routes under `ENFYRA_API_URL`; verify page extensions through the app URL/browser or extension/menu metadata.
 
 For authenticated route access, use `audit_route_access` before changing permissions and `ensure_route_access` to grant access by route path plus role/user. For production script edits, use `trace_metadata_usage`, `get_script_source`, and `patch_script_source` so changes are targeted, hash-checked, and validated.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enfyra/mcp-server",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "MCP server for Enfyra - manage Enfyra instances from MCP-compatible coding tools",
   "type": "module",
   "license": "MIT",

package/src/lib/platform-operation-tools.js

@@ -673,6 +673,42 @@ async function ensureMenu(apiUrl, {
   };
 }
 
+async function reorderMenus(apiUrl, { updates, globalRulesAckKey }) {
+  assertGlobalRulesAck(globalRulesAckKey);
+  const seen = new Set();
+  const normalizedUpdates = updates.map((item, index) => {
+    const id = item?.id;
+    if (id === null || id === undefined || String(id).trim() === '') {
+      throw new Error(`updates[${index}].id is required.`);
+    }
+    const key = String(id);
+    if (seen.has(key)) throw new Error(`Duplicate menu id in reorder payload: ${key}`);
+    seen.add(key);
+    const order = Number(item.order);
+    if (!Number.isInteger(order) || order < 0) {
+      throw new Error(`updates[${index}].order must be a non-negative integer.`);
+    }
+    const parent = item.parent === undefined || item.parent === null || String(item.parent).trim() === ''
+      ? null
+      : item.parent;
+    return { id, order, parent };
+  });
+  const result = await fetchAPI(apiUrl, '/admin/menu/reorder', {
+    method: 'POST',
+    body: JSON.stringify({ updates: normalizedUpdates }),
+  });
+  return {
+    action: 'menus_reordered',
+    updates: normalizedUpdates,
+    result,
+    reload: {
+      attempted: false,
+      succeeded: true,
+      reason: '/admin/menu/reorder persists order/parent updates and emits enfyra_menu cache invalidation.',
+    },
+  };
+}
+
 async function ensureExtension(apiUrl, {
   name,
   type,
@@ -2352,6 +2388,24 @@ export function registerPlatformOperationTools(server, ENFYRA_API_URL) {
     }),
   );
 
+  server.tool(
+    'reorder_menus',
+    [
+      'Business operation: reorder Enfyra admin menus and optionally move menus under a new parent.',
+      'Uses the server /admin/menu/reorder route introduced in Enfyra 2.2.6 instead of PATCHing each enfyra_menu record.',
+      'The server validates duplicate ids, non-negative integer order, dropdown-only parents, /data child restrictions, system menu parent locks, cycle prevention, persistence, and menu cache invalidation.',
+    ].join(' '),
+    {
+      updates: z.array(z.object({
+        id: z.union([z.string(), z.number()]).describe('Menu id to reorder.'),
+        order: z.number().int().nonnegative().describe('Sibling order index. Must be a non-negative integer.'),
+        parent: z.union([z.string(), z.number(), z.null()]).optional().describe('New parent menu id, or null for a root menu. Parent must be a Dropdown Menu.'),
+      })).min(1).describe('Menu order/parent updates, usually the changed siblings from drag-and-drop.'),
+      globalRulesAckKey: globalRulesAckParam(z),
+    },
+    async (input) => jsonText(await reorderMenus(ENFYRA_API_URL, input)),
+  );
+
   server.tool(
     'ensure_page_extension',
     'Business operation: create or update one page extension attached to an existing menu. Validates extension code before save. Call get_extension_theme_contract first for UI work.',

package/src/lib/tool-routing.js

@@ -67,7 +67,7 @@ export const TOOL_WORKFLOWS = [
     firstTools: ['get_enfyra_required_knowledge', 'get_extension_theme_contract', 'inspect_feature'],
     inspectTools: ['inspect_feature', 'trace_metadata_usage', 'get_script_source'],
     knowledgeTools: ['get_enfyra_required_knowledge', 'get_extension_theme_contract', 'get_theme_class_reference'],
-    writeTools: ['extension_workflow', 'ensure_menu', 'ensure_page_extension', 'ensure_global_extension', 'ensure_widget_extension'],
+    writeTools: ['extension_workflow', 'ensure_menu', 'reorder_menus', 'ensure_page_extension', 'ensure_global_extension', 'ensure_widget_extension'],
     verifyTools: ['validate_extension_code', 'inspect_feature'],
     avoidTools: [
       {
@@ -82,6 +82,12 @@ export const TOOL_WORKFLOWS = [
         useInstead: 'notification summary/realtime shell signal plus destination-page fetch on click',
         reason: 'Shell notifications should not fetch messages, tickets, orders, or jobs lists solely for a badge.',
       },
+      {
+        tool: 'update_record/PATCH enfyra_menu for order or parent changes',
+        when: 'drag-and-drop or programmatic menu ordering changes sibling order or parent',
+        useInstead: 'reorder_menus',
+        reason: 'The Enfyra 2.2.6 /admin/menu/reorder route validates menu hierarchy constraints and emits menu cache invalidation.',
+      },
     ],
     requiredAck: ['globalRulesAckKey', 'extensionAckKey when saving extension code'],
     exampleCategories: ['extensions'],
@@ -89,6 +95,7 @@ export const TOOL_WORKFLOWS = [
       'Call get_extension_theme_contract before writing or reviewing UI.',
       'Inspect the existing menu/extension/global shell registration.',
       'Use extension_workflow with apply=false when page/menu wiring or shell notification behavior needs multiple steps.',
+      'Use reorder_menus for menu order/parent changes instead of patching individual enfyra_menu records.',
       'Choose count only when the source already owns an exact count; choose dot/chip for new-attention signals.',
       'Validate extension code or use an ensure_*_extension tool that validates before saving.',
     ],

package/src/mcp-server-entry.mjs

@@ -173,6 +173,12 @@ const MCP_PERMISSION_REQUIREMENTS = [
     route: '/admin/reload/routes',
     methods: ['POST'],
   },
+  {
+    area: 'menu reorder',
+    tools: ['reorder_menus'],
+    route: '/admin/menu/reorder',
+    methods: ['POST'],
+  },
   {
     area: 'metadata cache reload',
     tools: ['reload_metadata'],