@josephyan/qingflow-cli 0.2.0-beta.73 → 0.2.0-beta.75

package/src/qingflow_mcp/repository_store.py

@@ -0,0 +1,71 @@
+from __future__ import annotations
+
+import json
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Any
+
+from .config import get_repository_metadata_dir
+
+
+def _utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+def _safe_key(value: str) -> str:
+    keep: list[str] = []
+    for char in value:
+        if char.isalnum() or char in {"-", "_"}:
+            keep.append(char)
+        else:
+            keep.append("_")
+    normalized = "".join(keep).strip("_")
+    return normalized or "repository"
+
+
+@dataclass(slots=True)
+class RepositoryMetadataStore:
+    base_dir: Path | None = None
+    _dir: Path = field(init=False, repr=False)
+
+    def __post_init__(self) -> None:
+        self._dir = self.base_dir or get_repository_metadata_dir()
+        self._dir.mkdir(parents=True, exist_ok=True)
+
+    def put(self, repo_name: str, payload: dict[str, Any]) -> dict[str, Any]:
+        now = _utc_now()
+        existing = self.get(repo_name) or {}
+        data = dict(existing)
+        data.update(payload)
+        data["repo_name"] = repo_name
+        data["created_at"] = existing.get("created_at") or now
+        data["updated_at"] = now
+        self._path(repo_name).write_text(json.dumps(data, ensure_ascii=False, indent=2), encoding="utf-8")
+        return data
+
+    def get(self, repo_name: str) -> dict[str, Any] | None:
+        path = self._path(repo_name)
+        if not path.exists():
+            return None
+        try:
+            payload = json.loads(path.read_text(encoding="utf-8"))
+        except (OSError, json.JSONDecodeError):
+            path.unlink(missing_ok=True)
+            return None
+        return payload if isinstance(payload, dict) else None
+
+    def list(self) -> list[dict[str, Any]]:
+        entries: list[dict[str, Any]] = []
+        for path in sorted(self._dir.glob("*.json")):
+            try:
+                payload = json.loads(path.read_text(encoding="utf-8"))
+            except (OSError, json.JSONDecodeError):
+                continue
+            if isinstance(payload, dict):
+                entries.append(payload)
+        entries.sort(key=lambda item: str(item.get("updated_at") or ""), reverse=True)
+        return entries
+
+    def _path(self, repo_name: str) -> Path:
+        return self._dir / f"{_safe_key(repo_name)}.json"

package/src/qingflow_mcp/response_trim.py

@@ -5,11 +5,17 @@ from copy import deepcopy
 from functools import wraps
 from typing import Any, Callable
 
+from .public_surface import (
+    BUILDER_DOMAIN,
+    USER_DOMAIN,
+    cli_trim_key_from_namespace,
+    server_method_map,
+    tool_key,
+)
+
 
 JSONObject = dict[str, Any]
 TransformFn = Callable[[JSONObject], None]
-USER_DOMAIN = "user"
-BUILDER_DOMAIN = "builder"
 
 
 COMMON_SUCCESS_DROP_TOP = {
@@ -47,10 +53,6 @@ COMMON_ERROR_DROP_TOP = {
 SUCCESS_POLICY_BY_TOOL: dict[str, TransformFn] = {}
 
 
-def _tool_key(domain: str, tool_name: str) -> str:
-    return f"{domain}:{tool_name}"
-
-
 def trim_public_response(tool_name: str | None, payload: dict[str, Any]) -> dict[str, Any]:
     if not isinstance(payload, dict):
         return payload
@@ -100,246 +102,11 @@ def wrap_trimmed_methods(instance: object, method_map: dict[str, str]) -> object
 
 
 def resolve_cli_tool_name(args: Any) -> str | None:
-    command = getattr(args, "command", None)
-    if command == "auth":
-        return {
-            "login": _tool_key(USER_DOMAIN, "auth_login"),
-            "use-token": _tool_key(USER_DOMAIN, "auth_use_token"),
-            "whoami": _tool_key(USER_DOMAIN, "auth_whoami"),
-            "logout": _tool_key(USER_DOMAIN, "auth_logout"),
-        }.get(getattr(args, "auth_command", None))
-    if command == "workspace":
-        return {
-            "list": _tool_key(USER_DOMAIN, "workspace_list"),
-            "select": _tool_key(USER_DOMAIN, "workspace_select"),
-        }.get(getattr(args, "workspace_command", None))
-    if command == "app":
-        return {
-            "list": _tool_key(USER_DOMAIN, "app_list"),
-            "search": _tool_key(USER_DOMAIN, "app_search"),
-            "get": _tool_key(USER_DOMAIN, "app_get"),
-        }.get(getattr(args, "app_command", None))
-    if command == "portal":
-        return {
-            "list": _tool_key(USER_DOMAIN, "portal_list"),
-            "get": _tool_key(USER_DOMAIN, "portal_get"),
-        }.get(getattr(args, "portal_command", None))
-    if command == "view":
-        return {
-            "get": _tool_key(USER_DOMAIN, "view_get"),
-        }.get(getattr(args, "view_command", None))
-    if command == "chart":
-        return {
-            "get": _tool_key(USER_DOMAIN, "chart_get"),
-        }.get(getattr(args, "chart_command", None))
-    if command == "record":
-        record_command = getattr(args, "record_command", None)
-        if record_command == "schema":
-            return {
-                "applicant": _tool_key(USER_DOMAIN, "record_schema_get"),
-                "browse": _tool_key(USER_DOMAIN, "record_browse_schema_get"),
-                "insert": _tool_key(USER_DOMAIN, "record_insert_schema_get"),
-                "update": _tool_key(USER_DOMAIN, "record_update_schema_get"),
-                "import": _tool_key(USER_DOMAIN, "record_import_schema_get"),
-                "code-block": _tool_key(USER_DOMAIN, "record_code_block_schema_get"),
-            }.get(getattr(args, "record_schema_command", None))
-        return {
-            "list": _tool_key(USER_DOMAIN, "record_list"),
-            "get": _tool_key(USER_DOMAIN, "record_get"),
-            "insert": _tool_key(USER_DOMAIN, "record_insert"),
-            "update": _tool_key(USER_DOMAIN, "record_update"),
-            "delete": _tool_key(USER_DOMAIN, "record_delete"),
-            "analyze": _tool_key(USER_DOMAIN, "record_analyze"),
-            "code-block-run": _tool_key(USER_DOMAIN, "record_code_block_run"),
-        }.get(record_command)
-    if command == "import":
-        return {
-            "template": _tool_key(USER_DOMAIN, "record_import_template_get"),
-            "verify": _tool_key(USER_DOMAIN, "record_import_verify"),
-            "repair": _tool_key(USER_DOMAIN, "record_import_repair_local"),
-            "start": _tool_key(USER_DOMAIN, "record_import_start"),
-            "status": _tool_key(USER_DOMAIN, "record_import_status_get"),
-        }.get(getattr(args, "import_command", None))
-    if command == "task":
-        return {
-            "list": _tool_key(USER_DOMAIN, "task_list"),
-            "get": _tool_key(USER_DOMAIN, "task_get"),
-            "action": _tool_key(USER_DOMAIN, "task_action_execute"),
-            "log": _tool_key(USER_DOMAIN, "task_workflow_log_get"),
-        }.get(getattr(args, "task_command", None))
-    if command not in {"builder", "build"}:
-        return None
-    builder_command = getattr(args, "builder_command", None)
-    if builder_command == "file":
-        return {
-            "upload-local": _tool_key(BUILDER_DOMAIN, "file_upload_local"),
-        }.get(getattr(args, "builder_file_command", None))
-    if builder_command == "feedback":
-        return {
-            "submit": _tool_key(BUILDER_DOMAIN, "feedback_submit"),
-        }.get(getattr(args, "builder_feedback_command", None))
-    if builder_command == "contract":
-        return _tool_key(BUILDER_DOMAIN, "builder_tool_contract")
-    if builder_command == "member":
-        return {
-            "search": _tool_key(BUILDER_DOMAIN, "member_search"),
-        }.get(getattr(args, "builder_member_command", None))
-    if builder_command == "role":
-        return {
-            "search": _tool_key(BUILDER_DOMAIN, "role_search"),
-            "create": _tool_key(BUILDER_DOMAIN, "role_create"),
-        }.get(getattr(args, "builder_role_command", None))
-    if builder_command == "package":
-        return {
-            "list": _tool_key(BUILDER_DOMAIN, "package_list"),
-            "resolve": _tool_key(BUILDER_DOMAIN, "package_resolve"),
-            "create": _tool_key(BUILDER_DOMAIN, "package_create"),
-            "attach-app": _tool_key(BUILDER_DOMAIN, "package_attach_app"),
-        }.get(getattr(args, "builder_package_command", None))
-    if builder_command == "app":
-        app_command = getattr(args, "builder_app_command", None)
-        if app_command == "get":
-            return {
-                "summary": _tool_key(BUILDER_DOMAIN, "app_get"),
-                "fields": _tool_key(BUILDER_DOMAIN, "app_get_fields"),
-                "layout": _tool_key(BUILDER_DOMAIN, "app_get_layout"),
-                "views": _tool_key(BUILDER_DOMAIN, "app_get_views"),
-                "flow": _tool_key(BUILDER_DOMAIN, "app_get_flow"),
-                "charts": _tool_key(BUILDER_DOMAIN, "app_get_charts"),
-            }.get(getattr(args, "builder_app_get_section", "summary"))
-        return {
-            "resolve": _tool_key(BUILDER_DOMAIN, "app_resolve"),
-            "release-edit-lock-if-mine": _tool_key(BUILDER_DOMAIN, "app_release_edit_lock_if_mine"),
-        }.get(app_command)
-    if builder_command == "button":
-        return {
-            "list": _tool_key(BUILDER_DOMAIN, "app_custom_button_list"),
-            "get": _tool_key(BUILDER_DOMAIN, "app_custom_button_get"),
-            "create": _tool_key(BUILDER_DOMAIN, "app_custom_button_create"),
-            "update": _tool_key(BUILDER_DOMAIN, "app_custom_button_update"),
-            "delete": _tool_key(BUILDER_DOMAIN, "app_custom_button_delete"),
-        }.get(getattr(args, "builder_button_command", None))
-    if builder_command == "portal":
-        return {
-            "list": _tool_key(BUILDER_DOMAIN, "portal_list"),
-            "get": _tool_key(BUILDER_DOMAIN, "portal_get"),
-            "apply": _tool_key(BUILDER_DOMAIN, "portal_apply"),
-        }.get(getattr(args, "builder_portal_command", None))
-    if builder_command == "view":
-        return {
-            "get": _tool_key(BUILDER_DOMAIN, "view_get"),
-        }.get(getattr(args, "builder_view_command", None))
-    if builder_command == "chart":
-        return {
-            "get": _tool_key(BUILDER_DOMAIN, "chart_get"),
-        }.get(getattr(args, "builder_chart_command", None))
-    if builder_command == "schema":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_schema_apply")}.get(getattr(args, "builder_schema_command", None))
-    if builder_command == "layout":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_layout_apply")}.get(getattr(args, "builder_layout_command", None))
-    if builder_command == "views":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_views_apply")}.get(getattr(args, "builder_views_command", None))
-    if builder_command == "flow":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_flow_apply")}.get(getattr(args, "builder_flow_command", None))
-    if builder_command == "charts":
-        return {"apply": _tool_key(BUILDER_DOMAIN, "app_charts_apply")}.get(getattr(args, "builder_charts_command", None))
-    if builder_command == "publish":
-        return {"verify": _tool_key(BUILDER_DOMAIN, "app_publish_verify")}.get(getattr(args, "builder_publish_command", None))
-    return None
-
-
-USER_SERVER_METHOD_MAP = {
-    "auth_login": _tool_key(USER_DOMAIN, "auth_login"),
-    "auth_use_token": _tool_key(USER_DOMAIN, "auth_use_token"),
-    "auth_whoami": _tool_key(USER_DOMAIN, "auth_whoami"),
-    "auth_logout": _tool_key(USER_DOMAIN, "auth_logout"),
-    "workspace_list": _tool_key(USER_DOMAIN, "workspace_list"),
-    "workspace_select": _tool_key(USER_DOMAIN, "workspace_select"),
-    "app_list": _tool_key(USER_DOMAIN, "app_list"),
-    "app_search": _tool_key(USER_DOMAIN, "app_search"),
-    "app_get": _tool_key(USER_DOMAIN, "app_get"),
-    "portal_list": _tool_key(USER_DOMAIN, "portal_list"),
-    "portal_get": _tool_key(USER_DOMAIN, "portal_get"),
-    "view_get": _tool_key(USER_DOMAIN, "view_get"),
-    "chart_get": _tool_key(USER_DOMAIN, "chart_get"),
-    "file_get_upload_info": _tool_key(USER_DOMAIN, "file_get_upload_info"),
-    "file_upload_local": _tool_key(USER_DOMAIN, "file_upload_local"),
-    "feedback_submit": _tool_key(USER_DOMAIN, "feedback_submit"),
-    "record_import_schema_get": _tool_key(USER_DOMAIN, "record_import_schema_get"),
-    "record_import_template_get": _tool_key(USER_DOMAIN, "record_import_template_get"),
-    "record_import_verify": _tool_key(USER_DOMAIN, "record_import_verify"),
-    "record_import_repair_local": _tool_key(USER_DOMAIN, "record_import_repair_local"),
-    "record_import_start": _tool_key(USER_DOMAIN, "record_import_start"),
-    "record_import_status_get": _tool_key(USER_DOMAIN, "record_import_status_get"),
-    "record_insert_schema_get_public": _tool_key(USER_DOMAIN, "record_insert_schema_get"),
-    "record_member_candidates": _tool_key(USER_DOMAIN, "record_member_candidates"),
-    "record_department_candidates": _tool_key(USER_DOMAIN, "record_department_candidates"),
-    "record_analyze": _tool_key(USER_DOMAIN, "record_analyze"),
-    "record_list": _tool_key(USER_DOMAIN, "record_list"),
-    "record_get_public": _tool_key(USER_DOMAIN, "record_get"),
-    "record_browse_schema_get_public": _tool_key(USER_DOMAIN, "record_browse_schema_get"),
-    "record_update_schema_get_public": _tool_key(USER_DOMAIN, "record_update_schema_get"),
-    "record_insert_public": _tool_key(USER_DOMAIN, "record_insert"),
-    "record_update_public": _tool_key(USER_DOMAIN, "record_update"),
-    "record_delete_public": _tool_key(USER_DOMAIN, "record_delete"),
-    "record_code_block_schema_get_public": _tool_key(USER_DOMAIN, "record_code_block_schema_get"),
-    "record_code_block_run": _tool_key(USER_DOMAIN, "record_code_block_run"),
-    "task_list": _tool_key(USER_DOMAIN, "task_list"),
-    "task_get": _tool_key(USER_DOMAIN, "task_get"),
-    "task_action_execute": _tool_key(USER_DOMAIN, "task_action_execute"),
-    "task_associated_report_detail_get": _tool_key(USER_DOMAIN, "task_associated_report_detail_get"),
-    "task_workflow_log_get": _tool_key(USER_DOMAIN, "task_workflow_log_get"),
-    "directory_search": _tool_key(USER_DOMAIN, "directory_search"),
-    "directory_list_internal_users": _tool_key(USER_DOMAIN, "directory_list_internal_users"),
-    "directory_list_all_internal_users": _tool_key(USER_DOMAIN, "directory_list_all_internal_users"),
-    "directory_list_internal_departments": _tool_key(USER_DOMAIN, "directory_list_internal_departments"),
-    "directory_list_all_departments": _tool_key(USER_DOMAIN, "directory_list_all_departments"),
-    "directory_list_sub_departments": _tool_key(USER_DOMAIN, "directory_list_sub_departments"),
-    "directory_list_external_members": _tool_key(USER_DOMAIN, "directory_list_external_members"),
-}
+    return cli_trim_key_from_namespace(args)
 
-BUILDER_SERVER_METHOD_MAP = {
-    "auth_login": _tool_key(BUILDER_DOMAIN, "auth_login"),
-    "auth_use_token": _tool_key(BUILDER_DOMAIN, "auth_use_token"),
-    "auth_whoami": _tool_key(BUILDER_DOMAIN, "auth_whoami"),
-    "auth_logout": _tool_key(BUILDER_DOMAIN, "auth_logout"),
-    "workspace_list": _tool_key(BUILDER_DOMAIN, "workspace_list"),
-    "workspace_select": _tool_key(BUILDER_DOMAIN, "workspace_select"),
-    "file_upload_local": _tool_key(BUILDER_DOMAIN, "file_upload_local"),
-    "feedback_submit": _tool_key(BUILDER_DOMAIN, "feedback_submit"),
-    "package_list": _tool_key(BUILDER_DOMAIN, "package_list"),
-    "package_resolve": _tool_key(BUILDER_DOMAIN, "package_resolve"),
-    "builder_tool_contract": _tool_key(BUILDER_DOMAIN, "builder_tool_contract"),
-    "package_create": _tool_key(BUILDER_DOMAIN, "package_create"),
-    "member_search": _tool_key(BUILDER_DOMAIN, "member_search"),
-    "role_search": _tool_key(BUILDER_DOMAIN, "role_search"),
-    "role_create": _tool_key(BUILDER_DOMAIN, "role_create"),
-    "package_attach_app": _tool_key(BUILDER_DOMAIN, "package_attach_app"),
-    "app_release_edit_lock_if_mine": _tool_key(BUILDER_DOMAIN, "app_release_edit_lock_if_mine"),
-    "app_resolve": _tool_key(BUILDER_DOMAIN, "app_resolve"),
-    "app_custom_button_list": _tool_key(BUILDER_DOMAIN, "app_custom_button_list"),
-    "app_custom_button_get": _tool_key(BUILDER_DOMAIN, "app_custom_button_get"),
-    "app_custom_button_create": _tool_key(BUILDER_DOMAIN, "app_custom_button_create"),
-    "app_custom_button_update": _tool_key(BUILDER_DOMAIN, "app_custom_button_update"),
-    "app_custom_button_delete": _tool_key(BUILDER_DOMAIN, "app_custom_button_delete"),
-    "app_get": _tool_key(BUILDER_DOMAIN, "app_get"),
-    "app_get_fields": _tool_key(BUILDER_DOMAIN, "app_get_fields"),
-    "app_get_layout": _tool_key(BUILDER_DOMAIN, "app_get_layout"),
-    "app_get_views": _tool_key(BUILDER_DOMAIN, "app_get_views"),
-    "app_get_flow": _tool_key(BUILDER_DOMAIN, "app_get_flow"),
-    "app_get_charts": _tool_key(BUILDER_DOMAIN, "app_get_charts"),
-    "portal_list": _tool_key(BUILDER_DOMAIN, "portal_list"),
-    "portal_get": _tool_key(BUILDER_DOMAIN, "portal_get"),
-    "view_get": _tool_key(BUILDER_DOMAIN, "view_get"),
-    "chart_get": _tool_key(BUILDER_DOMAIN, "chart_get"),
-    "app_schema_apply": _tool_key(BUILDER_DOMAIN, "app_schema_apply"),
-    "app_layout_apply": _tool_key(BUILDER_DOMAIN, "app_layout_apply"),
-    "app_flow_apply": _tool_key(BUILDER_DOMAIN, "app_flow_apply"),
-    "app_views_apply": _tool_key(BUILDER_DOMAIN, "app_views_apply"),
-    "app_charts_apply": _tool_key(BUILDER_DOMAIN, "app_charts_apply"),
-    "portal_apply": _tool_key(BUILDER_DOMAIN, "portal_apply"),
-    "app_publish_verify": _tool_key(BUILDER_DOMAIN, "app_publish_verify"),
-}
+
+USER_SERVER_METHOD_MAP = server_method_map(USER_DOMAIN)
+BUILDER_SERVER_METHOD_MAP = server_method_map(BUILDER_DOMAIN)
 
 
 def _wrap_callable(original: Callable[..., Any], tool_name: str) -> Callable[..., Any]:
@@ -600,7 +367,7 @@ def _trim_builder_list_like(payload: JSONObject) -> None:
 def _register_policy(domains: tuple[str, ...], names: tuple[str, ...], transform: TransformFn) -> None:
     for domain in domains:
         for name in names:
-            SUCCESS_POLICY_BY_TOOL[_tool_key(domain, name)] = transform
+            SUCCESS_POLICY_BY_TOOL[tool_key(domain, name)] = transform
 
 
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("auth_login", "auth_use_token", "auth_whoami"), _trim_auth_payload)
@@ -609,6 +376,7 @@ _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("workspace_list",), _trim_works
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("workspace_select",), _trim_workspace_select)
 _register_policy((USER_DOMAIN,), ("app_list", "app_search"), _trim_app_search_like)
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("app_get",), _trim_app_get)
+_register_policy((BUILDER_DOMAIN,), ("app_repair_code_blocks",), _trim_builder_list_like)
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("portal_list", "portal_get", "view_get", "chart_get"), _trim_builder_list_like)
 _register_policy((USER_DOMAIN,), ("file_get_upload_info",), _trim_file_upload_info)
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("file_upload_local",), _trim_file_upload_local)
@@ -645,6 +413,7 @@ _register_policy(
     (USER_DOMAIN,),
     (
         "task_get",
+        "task_save_only",
         "task_action_execute",
         "task_associated_report_detail_get",
         "task_workflow_log_get",
@@ -680,6 +449,7 @@ _register_policy(
         "package_list",
         "package_resolve",
         "builder_tool_contract",
+        "solution_install",
         "package_create",
         "member_search",
         "role_search",
@@ -693,6 +463,7 @@ _register_policy(
         "app_custom_button_update",
         "app_custom_button_delete",
         "app_get_fields",
+        "app_repair_code_blocks",
         "app_get_layout",
         "app_get_views",
         "app_get_flow",

package/src/qingflow_mcp/server_app_builder.py

@@ -34,10 +34,12 @@ def build_builder_server() -> FastMCP:
             "`feedback_submit` is always available as a cross-cutting helper when the current capability is unsupported, awkward, or still cannot satisfy the user's need after reasonable use; it does not require Qingflow login or workspace selection, and it should be called only after explicit user confirmation. "
             "Follow the resource path resolve -> summary read -> apply -> attach -> publish_verify. "
             "Use builder_tool_contract when you need a machine-readable contract, aliases, allowed enums, or a minimal valid example for a public builder tool. "
+            "Use solution_install when the user explicitly wants to install a packaged solution/template by solution_key, optionally copying bundled demo data. "
             "If creating a new package may be appropriate, ask the user to confirm package creation before calling package_create; otherwise use package_resolve/package_list and app_resolve to locate resources, "
-            "app_get/app_get_fields/app_get_layout/app_get_views/app_get_flow/app_get_charts/portal_list/portal_get/view_get/chart_get for configuration reads, "
+            "app_get/app_get_fields/app_repair_code_blocks/app_get_layout/app_get_views/app_get_flow/app_get_charts/portal_list/portal_get/view_get/chart_get for configuration reads, "
             "member_search/role_search/role_create when workflow assignees must come from the directory or role catalog, preferring roles over explicit members unless the user explicitly names members, "
             "then app_schema_apply/app_layout_apply/app_flow_apply/app_views_apply/app_charts_apply/portal_apply to execute normalized patches; these apply tools perform planning, normalization, and dependency checks internally where applicable. Schema/layout/views noop requests skip publish, charts are immediate-live without publish and resolve targets by chart_id first then exact unique chart name, portal updates are replace-only and publish=false only guarantees draft/base-info updates, and flow should use publish=false whenever you only want draft/precheck behavior. "
+            "For code_block fields with output bindings, always use qf_output assignment rather than const/let qf_output, and use app_repair_code_blocks when an existing form hangs because output-bound fields stay loading. "
             "Use package_attach_app to attach apps to packages, and app_publish_verify for explicit final publish verification. "
             "For workflow edits, keep the public builder surface on stable linear flows only: start/approve/fill/copy/webhook/end. Branch and condition nodes are intentionally disabled because the backend workflow route is not front-end stable for those node types. Declare node assignees and editable fields explicitly. "
             "If builder writes are blocked by the current user's own edit lock, use app_release_edit_lock_if_mine with the lock owner details from the failed result. "
@@ -198,6 +200,20 @@ def build_builder_server() -> FastMCP:
     ) -> dict:
         return ai_builder.package_create(profile=profile, package_name=package_name, icon=icon, color=color)
 
+    @server.tool()
+    def solution_install(
+        profile: str = DEFAULT_PROFILE,
+        solution_key: str = "",
+        being_copy_data: bool = True,
+        solution_source: str = "solutionDetail",
+    ) -> dict:
+        return ai_builder.solution_install(
+            profile=profile,
+            solution_key=solution_key,
+            being_copy_data=being_copy_data,
+            solution_source=solution_source,
+        )
+
     @server.tool()
     def member_search(
         profile: str = DEFAULT_PROFILE,
@@ -318,6 +334,15 @@ def build_builder_server() -> FastMCP:
     def app_get_fields(profile: str = DEFAULT_PROFILE, app_key: str = "") -> dict:
         return ai_builder.app_get_fields(profile=profile, app_key=app_key)
 
+    @server.tool()
+    def app_repair_code_blocks(
+        profile: str = DEFAULT_PROFILE,
+        app_key: str = "",
+        field: str | None = None,
+        apply: bool = False,
+    ) -> dict:
+        return ai_builder.app_repair_code_blocks(profile=profile, app_key=app_key, field=field, apply=apply)
+
     @server.tool()
     def app_get_layout(profile: str = DEFAULT_PROFILE, app_key: str = "") -> dict:
         return ai_builder.app_get_layout(profile=profile, app_key=app_key)

package/src/qingflow_mcp/server_app_user.py

@@ -117,6 +117,7 @@ Analysis answers must include concrete numbers. When applicable, include percent
 
 - Read relation targets from `record_insert_schema_get` / `record_update_schema_get` relation metadata before preparing relation writes.
 - Member and department fields may be written with natural strings directly on `record_insert` / `record_update`; only fall back to `record_member_candidates` or `record_department_candidates` when the user wants explicit candidate browsing or the write returns ambiguity that needs confirmation.
+- When candidate browsing must match a real update/write scope, pass `record_id`, `workflow_node_id`, and any pending `fields` context to the candidate tool; otherwise the candidate result is only a static applicant-node preview.
 - If explicit candidate browsing is needed for default-all member or department fields, prefer those field candidate tools instead of starting with `directory_*`.
 
 ## Code Block Path
@@ -143,11 +144,14 @@ Use `record_code_block_run` when the user wants to execute a form code-block fie
 
 ## Task Workflow Path
 
-`task_list -> task_get -> task_action_execute`
+`task_list -> task_get -> task_save_only / task_action_execute`
 
 - Use `task_associated_report_detail_get` for associated view or report details.
 - Use `task_workflow_log_get` for full workflow log history.
 - Task actions operate on `app_key + record_id + workflow_node_id`, not `task_id`.
+- Treat `task_action_execute` as the tool-level action enum surface; the current task's real actions are only the ones listed in `task_get.capabilities.available_actions`.
+- Use `task_save_only` when the user wants to save editable field changes on the current node without advancing the workflow.
+- `save_only` is exposed only when the backend current-node `editableQueIds` signal returns a non-empty result; MCP no longer infers `save_only` from local schema reconstruction.
 
 ## Time Handling