@qingflow-tech/qingflow-app-builder-mcp 1.0.30 → 1.0.32

package/README.md

@@ -3,13 +3,13 @@
 Install:
 
 ```bash
-npm install @qingflow-tech/qingflow-app-builder-mcp@1.0.30
+npm install @qingflow-tech/qingflow-app-builder-mcp@1.0.32
 ```
 
 Run:
 
 ```bash
-npx -y -p @qingflow-tech/qingflow-app-builder-mcp@1.0.30 qingflow-app-builder-mcp
+npx -y -p @qingflow-tech/qingflow-app-builder-mcp@1.0.32 qingflow-app-builder-mcp
 ```
 
 Environment:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qingflow-tech/qingflow-app-builder-mcp",
-  "version": "1.0.30",
+  "version": "1.0.32",
   "description": "Builder MCP for Qingflow app/package/system design and staged solution workflows.",
   "license": "MIT",
   "type": "module",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "qingflow-mcp"
-version = "1.0.30"
+version = "1.0.32"
 description = "User-authenticated MCP server for Qingflow"
 readme = "README.md"
 license = "MIT"

package/src/qingflow_mcp/builder_facade/service.py

@@ -99,6 +99,8 @@ from .models import (
     FlowNodePermissionsPatch,
 )
 
+BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT = 50
+
 
 QUESTION_TYPE_TO_FIELD_TYPE: dict[int, str] = {
     2: FieldType.text.value,
@@ -5998,6 +6000,42 @@ class AiBuilderFacade:
         warnings: list[dict[str, Any]] = []
         items: list[dict[str, Any]] = []
         permission_verified = True
+        if isinstance(raw_items, list) and len(raw_items) > BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT:
+            normalized = _normalize_portal_list_items(raw_items)
+            response = PortalListResponse(items=normalized, total=len(normalized))
+            warnings.append(
+                _warning(
+                    "PORTAL_PERMISSION_VERIFICATION_SKIPPED",
+                    "builder portal_list returned the discovery list without per-portal edit permission checks because the workspace has too many portals",
+                    total_available=len(raw_items),
+                    detail_verify_limit=BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT,
+                )
+            )
+            return {
+                "status": "success",
+                "error_code": None,
+                "recoverable": False,
+                "message": "list builder portal discovery items",
+                "normalized_args": {},
+                "missing_fields": [],
+                "allowed_values": {},
+                "details": {
+                    "total_available": len(raw_items),
+                    "detail_verify_limit": BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT,
+                    "permission_filter_applied": False,
+                },
+                "request_id": None,
+                "suggested_next_call": None,
+                "noop": False,
+                "warnings": warnings,
+                "verification": {
+                    "portal_list_loaded": True,
+                    "portal_permissions_verified": False,
+                    "permission_filter_applied": False,
+                },
+                "verified": False,
+                **response.model_dump(mode="json"),
+            }
         for raw_item in raw_items if isinstance(raw_items, list) else []:
             if not isinstance(raw_item, dict):
                 continue

package/src/qingflow_mcp/cli/commands/task.py

@@ -162,9 +162,6 @@ def _handle_action(args: argparse.Namespace, context: CliContext) -> dict:
     return context.task.task_action_execute(
         profile=args.profile,
         task_id=args.task_id,
-        app_key=args.app_key or "",
-        record_id=args.record_id or "",
-        workflow_node_id=int(args.workflow_node_id or 0),
         action=args.action,
         payload=payload,
         fields=fields,
@@ -225,9 +222,6 @@ def _run_task_workbench_task_loop(args: argparse.Namespace, context: CliContext)
         result = context.task.task_action_execute(
             profile=args.profile,
             task_id=args.task_id,
-            app_key=args.app_key or "",
-            record_id=args.record_id or "",
-            workflow_node_id=int(args.workflow_node_id or 0),
             action=args.action,
             payload=payload_selection,
             fields={},

package/src/qingflow_mcp/server.py

@@ -186,7 +186,7 @@ Use `record_code_block_run` when the user wants to execute a form code-block fie
 - `task_list` returns task-card summaries keyed by `task_id`.
 - For detail reads and actions, pass the exact `task_id` from `task_list.data.items[].task_id`.
 - `task_id` is not a row number, list index, record id, or workflow node id.
-- Do not reconstruct task actions from `app_key + record_id + workflow_node_id` unless the user explicitly provides that full locator for troubleshooting.
+- `task_action_execute` only uses `task_id`; do not reconstruct or pass `app_key + record_id + workflow_node_id` for actions.
 - `task_workflow_log_get(task_id=...)` and `task_associated_report_detail_get(task_id=...)` are also supported for the current todo context.
 - Use `task_associated_report_detail_get` for associated view or report details.
 - Use `task_workflow_log_get` for the current task context workflow log page. For full record-level data/workflow logs, first choose an accessible view with `app_get`, then call `record_logs_get(app_key, record_id, view_id)` with that same explicit `view_id`.

package/src/qingflow_mcp/server_app_user.py

@@ -191,7 +191,7 @@ Use export only when the user explicitly asks to export/download/generate an Exc
 - `task_list` returns task-card summaries keyed by `task_id`.
 - For detail reads and actions, pass the exact `task_id` from `task_list.data.items[].task_id`.
 - `task_id` is not a row number, list index, record id, or workflow node id.
-- Do not reconstruct task actions from `app_key + record_id + workflow_node_id` unless the user explicitly provides that full locator for troubleshooting.
+- `task_action_execute` only uses `task_id`; do not reconstruct or pass `app_key + record_id + workflow_node_id` for actions.
 - `task_workflow_log_get(task_id=...)` and `task_associated_report_detail_get(task_id=...)` are also supported for the current todo context.
 - Use `task_associated_report_detail_get` for associated view or report details.
 - Use `task_workflow_log_get` for the current task context workflow log page. For full record-level data/workflow logs, first choose an accessible view with `app_get`, then call `record_logs_get(app_key, record_id, view_id)` with that same explicit `view_id`.

package/src/qingflow_mcp/tools/ai_builder_tools.py

@@ -5343,6 +5343,7 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "returns builder-configurable portal list items only",
             "use this as the builder portal discovery path before portal_get",
             "results are compact list items, not raw dash payloads",
+            "large workspaces may return an unfiltered discovery list with portal_permissions_verified=false instead of probing every portal detail",
         ],
         "minimal_example": {
             "profile": "default",

package/src/qingflow_mcp/tools/approval_tools.py

@@ -1055,7 +1055,7 @@ class ApprovalTools(ToolBase):
         if node_id is None:
             node_payload = dict(payload or {})
             node_id = self._extract_node_id(node_payload)
-        delegated = TaskContextTools(self.sessions, self.backend).task_action_execute(
+        delegated = TaskContextTools(self.sessions, self.backend)._task_action_execute_with_locator(
             profile=profile,
             app_key=app_key,
             record_id=record_id,

package/src/qingflow_mcp/tools/task_context_tools.py

@@ -126,9 +126,6 @@ class TaskContextTools(ToolBase):
             return self.task_action_execute(
                 profile=profile,
                 task_id=task_id,
-                app_key="",
-                record_id="",
-                workflow_node_id=0,
                 action=action,
                 payload=payload or {},
                 fields=fields or {},
@@ -317,9 +314,7 @@ class TaskContextTools(ToolBase):
         self,
         *,
         profile: str,
-        app_key: str,
-        record_id: Any,
-        workflow_node_id: int,
+        task_id: Any,
         fields: dict[str, Any] | None = None,
     ) -> dict[str, Any]:
         """执行任务相关逻辑。"""
@@ -328,9 +323,7 @@ class TaskContextTools(ToolBase):
             raise_tool_error(QingflowApiError.config_error("fields is required and must be non-empty for task_save_only"))
         return self.task_action_execute(
             profile=profile,
-            app_key=app_key,
-            record_id=record_id,
-            workflow_node_id=workflow_node_id,
+            task_id=task_id,
             action="save_only",
             payload={},
             fields=field_updates,
@@ -338,6 +331,34 @@ class TaskContextTools(ToolBase):
 
     @tool_cn_name("执行任务动作")
     def task_action_execute(
+        self,
+        *,
+        profile: str,
+        task_id: Any,
+        action: str,
+        payload: dict[str, Any],
+        fields: dict[str, Any] | None = None,
+    ) -> dict[str, Any]:
+        """执行任务相关逻辑。"""
+        if task_id in (None, ""):
+            raise_tool_error(
+                QingflowApiError.config_error(
+                    "task_id is required for task_action_execute; get it from task_list.data.items[].task_id"
+                )
+            )
+
+        return self._task_action_execute_with_locator(
+            profile=profile,
+            task_id=task_id,
+            app_key="",
+            record_id="",
+            workflow_node_id=0,
+            action=action,
+            payload=payload,
+            fields=fields,
+        )
+
+    def _task_action_execute_with_locator(
         self,
         *,
         profile: str,
@@ -349,10 +370,8 @@ class TaskContextTools(ToolBase):
         payload: dict[str, Any],
         fields: dict[str, Any] | None = None,
     ) -> dict[str, Any]:
-        """执行任务相关逻辑。"""
         if task_id in (None, ""):
             normalize_positive_id_int(record_id, field_name="record_id")
-
         normalized_action = (action or "").strip().lower()
         if normalized_action not in {"approve", "reject", "rollback", "transfer", "urge", "save_only"}:
             raise_tool_error(
@@ -492,7 +511,7 @@ class TaskContextTools(ToolBase):
                     raise_tool_error(QingflowApiError.config_error(message))
                 raise_tool_error(
                     QingflowApiError.config_error(
-                        f"task action '{normalized_action}' is not currently available for app_key='{resolved_app_key}' record_id={record_id_text} workflow_node_id={resolved_workflow_node_id}"
+                        f"task action '{normalized_action}' is not currently available for task_id='{task_id_text}'"
                     )
                 )
             feedback_required_for = capabilities.get("action_constraints", {}).get("feedback_required_for") or []