@stackwright-pro/mcp 0.2.0-alpha.117 → 0.2.0-alpha.118

package/dist/server.js

@@ -4350,6 +4350,12 @@ function handleWritePhaseQuestions(input) {
       isError: true
     };
   }
+  if (AUTO_EXECUTE_PHASES.has(phase)) {
+    return {
+      text: JSON.stringify({ success: true, phase, questionCount: 0, autoExecute: true }),
+      isError: false
+    };
+  }
   try {
     const questions = parseLLMQuestionsResponse(responseText);
     let requiredPackages = {
@@ -7132,7 +7138,7 @@ var _checksums = /* @__PURE__ */ new Map([
   ],
   [
     "stackwright-pro-form-wizard-otter.json",
-    "941bb11b767530460f96fdd08af638b3ede9f7a1ae6f19de04b7d81c95cc62ad"
+    "7d958f2873cb80955ba5453837b67bee427f8399868979f59fecebe380a35ab9"
   ],
   [
     "stackwright-pro-geo-otter.json",
@@ -8362,10 +8368,20 @@ var WriteWorkflowContainerPageInputSchema = import_zod21.z.object({
    * Union of required roles across all steps in the workflow YAML.
    * Consumed by auth-reconcile to build protectedRoutes.
    * Must be non-empty — workflow pages are always auth-protected.
+   *
+   * ⚠️  MUST be a JSON array of strings: ["ROLE_A", "ROLE_B"].
+   * Do NOT pass a YAML bracket string "[ROLE_A, ROLE_B]",
+   * a JSON-encoded string "[\"ROLE_A\", \"ROLE_B\"]",
+   * or a comma-separated string "ROLE_A,ROLE_B" — all are rejected.
+   *
+   * Regression guard (swp-zfa9): 3-of-4 workflow-otter fan-outs crashed on
+   * runs 12-15 because the LLM passed a JSON-encoded string instead of an array.
    */
   requiredRoles: import_zod21.z.array(import_zod21.z.string().min(1)).min(1, {
-    message: "requiredRoles must have at least one role \u2014 workflow pages are always auth-protected"
-  }),
+    message: 'requiredRoles must have at least one role \u2014 workflow pages are always auth-protected. Pass a JSON array: ["ROLE_A", "ROLE_B"] \u2014 NOT a string or CSV.'
+  }).describe(
+    'JSON array of role strings. Example: ["ESF8_COORDINATOR", "HOSPITAL_EM"]. Must be a real JSON array \u2014 NOT a stringified array, YAML bracket sequence, or CSV string.'
+  ),
   /**
    * Persistence key for workflow state (localStorage slot).
    * Defaults to `workflow-<workflowId>` when omitted.
@@ -8459,7 +8475,11 @@ function registerWriteWorkflowContainerPageTool(server2) {
       "  - meta.authRequired: true, meta.requiredRoles: <your input>",
       "  - One workflow_wizard content item binding workflowFile + workflowId",
       "",
-      "requiredRoles: supply the UNION of required roles from all steps in your workflow YAML.",
+      "requiredRoles: MUST be a JSON array of strings (the union of all step auth.required_roles).",
+      '  CORRECT:   ["ESF8_COORDINATOR", "HOSPITAL_EM", "EMS_DISPATCHER"]',
+      '  WRONG:     "[\\"ESF8_COORDINATOR\\", \\"HOSPITAL_EM\\"]"  (string containing JSON)',
+      '  WRONG:     "ESF8_COORDINATOR,HOSPITAL_EM"              (comma-separated string)',
+      '  WRONG:     "[ESF8_COORDINATOR, HOSPITAL_EM]"           (YAML bracket notation)',
       'pageSlug: convention is "workflows/<workflowId>" \u2014 must start with "workflows/".'
     ].join("\n"),
     WriteWorkflowContainerPageInputSchema.shape,
@@ -9629,7 +9649,7 @@ var package_default = {
     "test:coverage": "vitest run --coverage"
   },
   name: "@stackwright-pro/mcp",
-  version: "0.2.0-alpha.117",
+  version: "0.2.0-alpha.118",
   description: "MCP tools for Stackwright Pro - Data Explorer, Security, ISR, and Dashboard generation",
   license: "SEE LICENSE IN LICENSE",
   main: "./dist/server.js",