drupal-mcp-connector 2.10.0 → 2.10.1

package/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.10.1] - 2026-08-28
+
+### Fixed
+- **Node reads include the numeric Drupal node ID (#237).** JSON:API-backed
+  `drupal_get_node` and `drupal_entity_get` results retain
+  `fields.drupal_internal__nid`, matching schema discovery while preserving
+  entity allowlists and configured field redaction. The canonical top-level
+  `id` remains the UUID.
+
+### Deprecated
+- **Loopback `shared_bearer` inbound auth (#231).** Startup warns when
+  `resolveInboundAuthMode` is `shared_bearer`, naming removal in v3.0.0.
+  Resource-server mode is silent. `npm run verify` lists the residual.
+  This is the deprecation half only; removal waits for the next major.
+
 ## [2.10.0] - 2026-08-27
 
 ### Security
@@ -1314,6 +1329,7 @@ The connector is now **dual-protocol**: every tool runs against an abstract back
 - User tools gained explicit PII-access assertions.
 - Whole tree lint-clean (`npm run lint`) with object-injection sinks rewritten to safe lookups.
 
+[2.10.1]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.10.1
 [1.0.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v1.0.0
 [0.10.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.10.0
 [0.9.1]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v0.9.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drupal-mcp-connector",
-  "version": "2.10.0",
+  "version": "2.10.1",
   "description": "A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL.",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -39,6 +39,7 @@ import {
   makeBearerCheck,
   resolveInboundAuthConfig,
   resolveInboundAuthMode,
+  inboundAuthDeprecationWarning,
   createInboundHttpsAuth,
 } from "./lib/http-auth.js";
 import { createLegacySessionHandler, createMcpRequestHandler } from "./lib/http-handler.js";
@@ -404,6 +405,8 @@ if (transport === "stdio") {
     console.error(`[drupal-mcp-connector] FATAL: ${inboundMode.reason}`);
     process.exit(1);
   }
+  const deprecation = inboundAuthDeprecationWarning(inboundMode.mode);
+  if (deprecation) console.error(deprecation);
 
   let checkAuth = makeBearerCheck(inboundMode.mode === "shared_bearer" ? authToken : "");
   let authenticate = null;

package/src/lib/backends/jsonapi.js

@@ -17,8 +17,9 @@ import {
   BASE_ATTRIBUTE_FIELDS,
 } from "../canonical.js";
 
-// Drupal exposes internal numeric ids under drupal_internal__* attributes;
-// these are dropped from canonical `fields` (the canonical id is the UUID).
+// Drupal exposes internal identifiers under drupal_internal__* attributes.
+// They are dropped from canonical `fields` except for the identifiers that
+// governed read/write workflows explicitly need.
 const INTERNAL_ATTR_RE = /^drupal_internal__/;
 
 // countEntities() pagination. Drupal core JSON:API returns no total in `meta`,
@@ -194,8 +195,9 @@ export class JsonApiBackend extends Backend {
 
   /**
    * Convert a JSON:API resource object into a CanonicalEntity. Base attributes
-   * (title/status/...) are promoted; drupal_internal__* and base fields are
-   * stripped from `fields`; relationships are normalized to canonical refs.
+   * (title/status/...) are promoted; base fields and unneeded
+   * drupal_internal__* attributes are stripped from `fields`; relationships
+   * are normalized to canonical refs.
    * @param {object} resource A JSON:API resource object.
    * @returns {import("../canonical.js").CanonicalEntity}
    */
@@ -208,10 +210,13 @@ export class JsonApiBackend extends Backend {
       Object.entries(attrs).filter(([k]) => {
         if (BASE_ATTRIBUTE_FIELDS.includes(k)) return false;
         if (INTERNAL_ATTR_RE.test(k)) {
+          // Node reads expose the numeric nid advertised by schema discovery
+          // while the UUID remains the canonical top-level id (#237).
           // Paragraph ERR attach needs the current revision id (#192).
           // Node / revisionable writes need the working vs live vid (#166).
           // Other drupal_internal__* attributes stay stripped.
-          return k === "drupal_internal__vid"
+          return (entityType === "node" && k === "drupal_internal__nid")
+            || k === "drupal_internal__vid"
             || (entityType === "paragraph" && k === "drupal_internal__revision_id");
         }
         return true;

package/src/lib/http-auth.js

@@ -479,6 +479,26 @@ export function resolveInboundAuthMode({
   };
 }
 
+/**
+ * Startup deprecation warning for inbound auth mode `shared_bearer` (#231).
+ *
+ * Removal is the next major (v3.0.0). Resource-server and unauthenticated
+ * modes are silent. The warning names the issue and the removal version so
+ * a loopback install cannot miss the kill criterion.
+ *
+ * @param {string} mode
+ * @returns {?string} Warning text, or null when this mode is not deprecated.
+ */
+export function inboundAuthDeprecationWarning(mode) {
+  if (mode !== "shared_bearer") return null;
+  return (
+    "[drupal-mcp-connector] WARNING: inbound auth mode shared_bearer is deprecated " +
+    "and will be removed in v3.0.0 (#231). Configure an OAuth resource server " +
+    "(auth.issuer + auth.audience) or run unauthenticated loopback. " +
+    "MCP_ALLOW_UNAUTHENTICATED remains the explicit trusted-proxy opt-in."
+  );
+}
+
 /**
  * Merge config.auth with environment overrides.
  * @param {object} [cfg]

package/src/lib/verify.js

@@ -75,6 +75,16 @@ export const RESIDUALS = [
       "responsibility; the connector reads secrets from the environment and never " +
       "stores them.",
   },
+  {
+    id: "loopback_shared_bearer",
+    status: "managed",
+    detail:
+      "Loopback MCP_AUTH_TOKEN (inbound mode shared_bearer) still ships. It is " +
+      "deprecated as of this release and will be removed in v3.0.0 (#231). " +
+      "Network-facing product paths already refuse it. MCP_ALLOW_UNAUTHENTICATED " +
+      "is a separate named residual: an explicit trusted-proxy opt-in, not a " +
+      "shared credential, and is not retired by #231.",
+  },
 ];
 
 /** Hostname suffixes reserved for documentation and testing (RFC 2606/6761). */