@qingflow-tech/qingflow-app-user-mcp 1.0.29 → 1.0.31

package/README.md

@@ -3,13 +3,13 @@
 Install:
 
 ```bash
-npm install @qingflow-tech/qingflow-app-user-mcp@1.0.29
+npm install @qingflow-tech/qingflow-app-user-mcp@1.0.31
 ```
 
 Run:
 
 ```bash
-npx -y -p @qingflow-tech/qingflow-app-user-mcp@1.0.29 qingflow-app-user-mcp
+npx -y -p @qingflow-tech/qingflow-app-user-mcp@1.0.31 qingflow-app-user-mcp
 ```
 
 Environment:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qingflow-tech/qingflow-app-user-mcp",
-  "version": "1.0.29",
+  "version": "1.0.31",
   "description": "Operational end-user MCP for Qingflow records, tasks, comments, and directory workflows.",
   "license": "MIT",
   "type": "module",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "qingflow-mcp"
-version = "1.0.29"
+version = "1.0.31"
 description = "User-authenticated MCP server for Qingflow"
 readme = "README.md"
 license = "MIT"

package/src/qingflow_mcp/builder_facade/service.py

@@ -99,6 +99,8 @@ from .models import (
     FlowNodePermissionsPatch,
 )
 
+BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT = 50
+
 
 QUESTION_TYPE_TO_FIELD_TYPE: dict[int, str] = {
     2: FieldType.text.value,
@@ -5998,6 +6000,42 @@ class AiBuilderFacade:
         warnings: list[dict[str, Any]] = []
         items: list[dict[str, Any]] = []
         permission_verified = True
+        if isinstance(raw_items, list) and len(raw_items) > BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT:
+            normalized = _normalize_portal_list_items(raw_items)
+            response = PortalListResponse(items=normalized, total=len(normalized))
+            warnings.append(
+                _warning(
+                    "PORTAL_PERMISSION_VERIFICATION_SKIPPED",
+                    "builder portal_list returned the discovery list without per-portal edit permission checks because the workspace has too many portals",
+                    total_available=len(raw_items),
+                    detail_verify_limit=BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT,
+                )
+            )
+            return {
+                "status": "success",
+                "error_code": None,
+                "recoverable": False,
+                "message": "list builder portal discovery items",
+                "normalized_args": {},
+                "missing_fields": [],
+                "allowed_values": {},
+                "details": {
+                    "total_available": len(raw_items),
+                    "detail_verify_limit": BUILDER_PORTAL_LIST_DETAIL_VERIFY_LIMIT,
+                    "permission_filter_applied": False,
+                },
+                "request_id": None,
+                "suggested_next_call": None,
+                "noop": False,
+                "warnings": warnings,
+                "verification": {
+                    "portal_list_loaded": True,
+                    "portal_permissions_verified": False,
+                    "permission_filter_applied": False,
+                },
+                "verified": False,
+                **response.model_dump(mode="json"),
+            }
         for raw_item in raw_items if isinstance(raw_items, list) else []:
             if not isinstance(raw_item, dict):
                 continue

package/src/qingflow_mcp/tools/ai_builder_tools.py

@@ -5343,6 +5343,7 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "returns builder-configurable portal list items only",
             "use this as the builder portal discovery path before portal_get",
             "results are compact list items, not raw dash payloads",
+            "large workspaces may return an unfiltered discovery list with portal_permissions_verified=false instead of probing every portal detail",
         ],
         "minimal_example": {
             "profile": "default",

package/src/qingflow_mcp/tools/task_context_tools.py

@@ -38,6 +38,9 @@ from .record_tools import (
 from .task_tools import TaskTools, _task_page_amount, _task_page_items, _task_page_total
 
 
+TASK_LOCATOR_MAX_SCAN_PAGES_PER_BOX = 3
+
+
 class TaskContextTools(ToolBase):
     """任务上下文工具（中文名：任务上下文与审批执行）。
 
@@ -1252,6 +1255,7 @@ class TaskContextTools(ToolBase):
         searched_task_boxes = ("todo", "initiated", "cc", "done")
         incomplete_task_boxes: list[str] = []
         inaccessible_task_boxes: list[dict[str, Any]] = []
+        truncated_task_boxes: list[dict[str, Any]] = []
         page_size = 100
         for task_box in searched_task_boxes:
             page = 1
@@ -1305,6 +1309,16 @@ class TaskContextTools(ToolBase):
                     break
                 if not items or len(items) < page_size:
                     break
+                if page >= TASK_LOCATOR_MAX_SCAN_PAGES_PER_BOX:
+                    truncated_task_boxes.append(
+                        {
+                            "task_box": task_box,
+                            "max_pages": TASK_LOCATOR_MAX_SCAN_PAGES_PER_BOX,
+                            "page_size": page_size,
+                            "reported_page_amount": page_amount,
+                        }
+                    )
+                    break
                 page += 1
         if incomplete_task_boxes:
             searched = ", ".join(incomplete_task_boxes)
@@ -1325,6 +1339,19 @@ class TaskContextTools(ToolBase):
                     },
                 )
             )
+        if truncated_task_boxes:
+            raise_tool_error(
+                QingflowApiError.config_error(
+                    f"task_id={task_id_text} was not found in the first {TASK_LOCATOR_MAX_SCAN_PAGES_PER_BOX} pages of each visible task box. Rerun task_list with a query or the relevant page and pass the exact data.items[].task_id; do not guess task ids.",
+                    details={
+                        "task_id": task_id_text,
+                        "searched_task_boxes": list(searched_task_boxes),
+                        "truncated_task_boxes": truncated_task_boxes,
+                        "max_pages_per_task_box": TASK_LOCATOR_MAX_SCAN_PAGES_PER_BOX,
+                        "page_size": page_size,
+                    },
+                )
+            )
         raise_tool_error(
             QingflowApiError.config_error(
                 f"task_id={task_id_text} was not found in the current visible task boxes (todo, initiated, cc, done). Rerun task_list and pass data.items[].task_id; do not use the displayed row number or guess app_key/record_id/workflow_node_id."