drupal-mcp-connector 2.15.2 → 2.17.0

package/.agents/commands/drupal-codegen-diff.md

@@ -0,0 +1,17 @@
+---
+description: "Compare the live graphql_compose schema to the last gqcc:generate snapshot (`drush graphql-compose-codegen:diff`). Requires the module and drushSsh. Missing command fails loud. If allowedCommands is set, include graphql-compose-codegen:diff."
+argument-hint: "[site] [bundles] [skipFields]"
+---
+
+Call the MCP tool `drupal_codegen_diff`.
+
+Compare the live graphql_compose schema to the last gqcc:generate snapshot (`drush graphql-compose-codegen:diff`). Requires the module and drushSsh. Missing command fails loud. If allowedCommands is set, include graphql-compose-codegen:diff.
+
+Parse the arguments supplied with this command into this tool's parameters:
+
+**Optional:**
+- `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `bundles` (array (pass as JSON)): Node/paragraph bundle ids. Omit for every bundle graphql_compose exposes.
+- `skipFields` (array (pass as JSON)): Extra field machine names to exclude from the scaffold.
+
+If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-codegen-generate.md

@@ -0,0 +1,17 @@
+---
+description: "Return TypeScript/GraphQL scaffold artefacts from graphql_compose_codegen as text (`drush graphql-compose-codegen:generate --dry-run`). Never writes on the Drupal host (no --output-dir). Copy artefacts locally. Requires the module and drushSsh. Missing command fails loud. If allowedCommands is set, include graphql-compose-codegen:generate."
+argument-hint: "[site] [bundles] [skipFields]"
+---
+
+Call the MCP tool `drupal_codegen_generate`.
+
+Return TypeScript/GraphQL scaffold artefacts from graphql_compose_codegen as text (`drush graphql-compose-codegen:generate --dry-run`). Never writes on the Drupal host (no --output-dir). Copy artefacts locally. Requires the module and drushSsh. Missing command fails loud. If allowedCommands is set, include graphql-compose-codegen:generate.
+
+Parse the arguments supplied with this command into this tool's parameters:
+
+**Optional:**
+- `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `bundles` (array (pass as JSON)): Node/paragraph bundle ids. Omit for every bundle graphql_compose exposes.
+- `skipFields` (array (pass as JSON)): Extra field machine names to exclude from the scaffold.
+
+If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-codegen-inspect.md

@@ -0,0 +1,17 @@
+---
+description: "List node and paragraph bundles and extra fields from graphql_compose_codegen (`drush graphql-compose-codegen:inspect`). Requires the module and drushSsh. Missing command fails loud. If allowedCommands is set, include graphql-compose-codegen:inspect. Does not write files."
+argument-hint: "[site] [bundles] [skipFields]"
+---
+
+Call the MCP tool `drupal_codegen_inspect`.
+
+List node and paragraph bundles and extra fields from graphql_compose_codegen (`drush graphql-compose-codegen:inspect`). Requires the module and drushSsh. Missing command fails loud. If allowedCommands is set, include graphql-compose-codegen:inspect. Does not write files.
+
+Parse the arguments supplied with this command into this tool's parameters:
+
+**Optional:**
+- `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `bundles` (array (pass as JSON)): Node/paragraph bundle ids. Omit for every bundle graphql_compose exposes.
+- `skipFields` (array (pass as JSON)): Extra field machine names to exclude from the scaffold.
+
+If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-content-by-moderation-state.md

@@ -1,11 +1,11 @@
 ---
-description: "List nodes of a content type currently in a given moderation state (e.g. what is in 'draft' or 'needs_review'). Stock JSON:API cannot filter the computed moderation_state field; when the site rejects that filter the tool samples recent nodes client-side and marks the result approximate, instead of returning Drupal's 500."
-argument-hint: "<type> <state> [site] [limit] [offset]"
+description: "List nodes of a content type currently in a given moderation state (e.g. what is in 'draft' or 'needs_review'). Pass langcode to match that translation via Sentinel inventory (the editorial work queue). Omit langcode for default-language JSON:API / sampled behavior. Stock JSON:API cannot filter the computed moderation_state field; when the site rejects that filter the tool samples recent nodes client-side and marks the result approximate, instead of returning Drupal's 500."
+argument-hint: "<type> <state> [site] [langcode] [limit] [offset]"
 ---
 
 Call the MCP tool `drupal_content_by_moderation_state`.
 
-List nodes of a content type currently in a given moderation state (e.g. what is in 'draft' or 'needs_review'). Stock JSON:API cannot filter the computed moderation_state field; when the site rejects that filter the tool samples recent nodes client-side and marks the result approximate, instead of returning Drupal's 500.
+List nodes of a content type currently in a given moderation state (e.g. what is in 'draft' or 'needs_review'). Pass langcode to match that translation via Sentinel inventory (the editorial work queue). Omit langcode for default-language JSON:API / sampled behavior. Stock JSON:API cannot filter the computed moderation_state field; when the site rejects that filter the tool samples recent nodes client-side and marks the result approximate, instead of returning Drupal's 500.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -15,6 +15,7 @@ Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `langcode` (string): Match this translation (e.g. 'es'). Requires Sentinel. Omit for default-language listing.
 - `limit` (number)
 - `offset` (number)
 

package/.agents/commands/drupal-create-translation.md

@@ -1,11 +1,11 @@
 ---
-description: "Create a translation as an unpublished non-default draft (governed write). Adds the target language beside the default language; it does not PATCH langcode on the canonical entity. When an English working draft already exists, both live and working revision IDs are sent (If-Match) so Sentinel will add the language on that draft (#282). English live title, body, status, alias, default revision, and paragraph ERR pins stay unchanged. An existing translation is a conflict, not an overwrite. The response includes `_revisions.live` / `_revisions.working` when known. Computed `metatag` is omitted on the draft body because JSON:API resolves it from the live default (#283); use field_metatags. Continue a node draft with drupal_update_node and langcode; continue a paragraph with drupal_update_paragraph and langcode. Image alt is a relationship (same file UUID, meta.alt). For paragraphs pass revisionId as the host pin. Requires Sentinel's draft-translation endpoint. Publication stays denied for content-tier callers."
+description: "Create a translation as an unpublished non-default draft (governed write). Adds the target language beside the default language; it does not PATCH langcode on the canonical entity. When an English working draft already exists, both live and working revision IDs are sent (If-Match) so Sentinel will add the language on that draft (#282). English live title, body, status, alias, default revision, and paragraph ERR pins stay unchanged. An existing translation is a conflict, not an overwrite. The response includes `_revisions.live` / `_revisions.working` when known. Computed `metatag` is omitted on the draft body because JSON:API resolves it from the live default (#283); use field_metatags. Continue a node draft with drupal_update_node and langcode; a paragraph with drupal_update_paragraph and langcode; media with drupal_update_media and langcode. Image alt is a relationship (same file UUID, meta.alt) — on media that is field_media_image, not a node image field. For paragraphs pass revisionId as the host pin. Requires Sentinel's draft-translation endpoint. Publication stays denied for content-tier callers."
 argument-hint: "<type> <id> <langcode> [site] [entityType] [attributes] [relationships] [revisionId] [dryRun]"
 ---
 
 Call the MCP tool `drupal_create_translation`.
 
-Create a translation as an unpublished non-default draft (governed write). Adds the target language beside the default language; it does not PATCH langcode on the canonical entity. When an English working draft already exists, both live and working revision IDs are sent (If-Match) so Sentinel will add the language on that draft (#282). English live title, body, status, alias, default revision, and paragraph ERR pins stay unchanged. An existing translation is a conflict, not an overwrite. The response includes `_revisions.live` / `_revisions.working` when known. Computed `metatag` is omitted on the draft body because JSON:API resolves it from the live default (#283); use field_metatags. Continue a node draft with drupal_update_node and langcode; continue a paragraph with drupal_update_paragraph and langcode. Image alt is a relationship (same file UUID, meta.alt). For paragraphs pass revisionId as the host pin. Requires Sentinel's draft-translation endpoint. Publication stays denied for content-tier callers.
+Create a translation as an unpublished non-default draft (governed write). Adds the target language beside the default language; it does not PATCH langcode on the canonical entity. When an English working draft already exists, both live and working revision IDs are sent (If-Match) so Sentinel will add the language on that draft (#282). English live title, body, status, alias, default revision, and paragraph ERR pins stay unchanged. An existing translation is a conflict, not an overwrite. The response includes `_revisions.live` / `_revisions.working` when known. Computed `metatag` is omitted on the draft body because JSON:API resolves it from the live default (#283); use field_metatags. Continue a node draft with drupal_update_node and langcode; a paragraph with drupal_update_paragraph and langcode; media with drupal_update_media and langcode. Image alt is a relationship (same file UUID, meta.alt) — on media that is field_media_image, not a node image field. For paragraphs pass revisionId as the host pin. Requires Sentinel's draft-translation endpoint. Publication stays denied for content-tier callers.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -16,7 +16,7 @@ Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
-- `entityType` (string): Entity type machine name. Default: 'node'. Use 'paragraph' for paragraph field values.
+- `entityType` (string): Entity type machine name. Default: 'node'. Use 'paragraph' for paragraph field values, 'media' for media (name, caption, image alt).
 - `attributes` (object (pass as JSON)): Translated field values keyed by Drupal machine name
 - `relationships` (object (pass as JSON)): JSON:API relationships. Use for image alt (same file UUID, meta.alt).
 - `revisionId` (string): Paragraph revision id the host already pins. Required for Home-shaped non-default pins.

package/.agents/commands/drupal-describe-fields.md

@@ -1,11 +1,11 @@
 ---
-description: "Introspect the fields of a Drupal entity type + bundle: returns a per-field list of { name, type, kind, cardinality?, approximate }. Read-only. Built on schema SAMPLING (an existing entity), so results are approximate — only populated fields are visible and required/cardinality/allowedValues are inferred from value shape. Authoritative field metadata comes from the Drush bridge (Field API). Use this before creating/updating entities to learn field names."
+description: "Introspect the fields of a Drupal entity type + bundle: returns a per-field list of { name, type, kind, cardinality?, translatable?, approximate }. Read-only. Built on schema SAMPLING (an existing entity), so results are approximate — only populated fields are visible and required/cardinality/allowedValues are inferred from value shape. When JSON:API field_config is readable, translatable is copied from Field API; omitted means unknown, not false. Authoritative field metadata comes from the Drush bridge (Field API). Use this before creating/updating entities to learn field names."
 argument-hint: "<site> [type] [entityType] [bundle]"
 ---
 
 Call the MCP tool `drupal_describe_fields`.
 
-Introspect the fields of a Drupal entity type + bundle: returns a per-field list of { name, type, kind, cardinality?, approximate }. Read-only. Built on schema SAMPLING (an existing entity), so results are approximate — only populated fields are visible and required/cardinality/allowedValues are inferred from value shape. Authoritative field metadata comes from the Drush bridge (Field API). Use this before creating/updating entities to learn field names.
+Introspect the fields of a Drupal entity type + bundle: returns a per-field list of { name, type, kind, cardinality?, translatable?, approximate }. Read-only. Built on schema SAMPLING (an existing entity), so results are approximate — only populated fields are visible and required/cardinality/allowedValues are inferred from value shape. When JSON:API field_config is readable, translatable is copied from Field API; omitted means unknown, not false. Authoritative field metadata comes from the Drush bridge (Field API). Use this before creating/updating entities to learn field names.
 
 Parse the arguments supplied with this command into this tool's parameters:
 

package/.agents/commands/drupal-get-media.md

@@ -1,11 +1,11 @@
 ---
-description: "Fetch a single media entity by UUID and media type."
-argument-hint: "<type> <id> [site]"
+description: "Fetch a single media entity by UUID and media type. Image alt/title are on the file relationship (meta.alt / meta.title). Pass langcode to read an unpublished working translation via Sentinel."
+argument-hint: "<type> <id> [site] [langcode]"
 ---
 
 Call the MCP tool `drupal_get_media`.
 
-Fetch a single media entity by UUID and media type.
+Fetch a single media entity by UUID and media type. Image alt/title are on the file relationship (meta.alt / meta.title). Pass langcode to read an unpublished working translation via Sentinel.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -15,5 +15,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `langcode` (string): Target language (e.g. 'es') to read the unpublished working translation instead of the default language.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-get-node.md

@@ -1,11 +1,11 @@
 ---
-description: "Fetch a single Drupal content node by UUID and content type. Returns title, body, status, path alias, and all attributes. Pass langcode to read a working translation draft via Sentinel (distinct from published English)."
-argument-hint: "<type> <id> [site] [langcode]"
+description: "Fetch a single Drupal content node by UUID and content type. Returns title, body, status, path alias, and all attributes. Pass langcode to read a working translation draft via Sentinel (distinct from published English). Pass includeComponents true to attach pinned paragraph translations under `components` (default false)."
+argument-hint: "<type> <id> [site] [langcode] [includeComponents]"
 ---
 
 Call the MCP tool `drupal_get_node`.
 
-Fetch a single Drupal content node by UUID and content type. Returns title, body, status, path alias, and all attributes. Pass langcode to read a working translation draft via Sentinel (distinct from published English).
+Fetch a single Drupal content node by UUID and content type. Returns title, body, status, path alias, and all attributes. Pass langcode to read a working translation draft via Sentinel (distinct from published English). Pass includeComponents true to attach pinned paragraph translations under `components` (default false).
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -16,5 +16,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
 - `langcode` (string): Target language (e.g. 'es') to read the unpublished working translation instead of the default language.
+- `includeComponents` (boolean (true/false)): If true, include pinned paragraph translations under `components` (empty array when the host has no ERR fields). Default false so existing callers are unchanged.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-get-taxonomy-term.md

@@ -1,11 +1,11 @@
 ---
-description: "Fetch a single taxonomy term by UUID."
-argument-hint: "<vocabulary> <id> [site]"
+description: "Fetch a single taxonomy term by UUID. Pass langcode to request that translation; omit for the default language. JSON:API must negotiate language or the tool errors if a different language is served."
+argument-hint: "<vocabulary> <id> [site] [langcode]"
 ---
 
 Call the MCP tool `drupal_get_taxonomy_term`.
 
-Fetch a single taxonomy term by UUID.
+Fetch a single taxonomy term by UUID. Pass langcode to request that translation; omit for the default language. JSON:API must negotiate language or the tool errors if a different language is served.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -15,5 +15,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `langcode` (string): Translation language (e.g. 'es'). Omit for the default language.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-list-translations.md

@@ -1,11 +1,11 @@
 ---
-description: "List live and working translation langcodes for a Drupal node or paragraph. Uses Sentinel's translation inventory when available (live default revision vs unpublished working draft). Core JSON:API alone serves one language and cannot prove others are absent. Defaults to node."
+description: "List live and working translation langcodes for a Drupal node, paragraph, or media entity. Uses Sentinel's translation inventory when available (live default revision vs unpublished working draft), including core content_translation_outdated and source when the server sends them. Core JSON:API alone serves one language and cannot prove others are absent. Defaults to node."
 argument-hint: "<type> <id> [site] [entityType]"
 ---
 
 Call the MCP tool `drupal_list_translations`.
 
-List live and working translation langcodes for a Drupal node or paragraph. Uses Sentinel's translation inventory when available (live default revision vs unpublished working draft). Core JSON:API alone serves one language and cannot prove others are absent. Defaults to node.
+List live and working translation langcodes for a Drupal node, paragraph, or media entity. Uses Sentinel's translation inventory when available (live default revision vs unpublished working draft), including core content_translation_outdated and source when the server sends them. Core JSON:API alone serves one language and cannot prove others are absent. Defaults to node.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -15,6 +15,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
-- `entityType` (string): Entity type machine name. Default: 'node'.
+- `entityType` (string): Entity type machine name. Default: 'node'. Use 'paragraph' or 'media' when listing those.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-report-translation-coverage.md

@@ -1,18 +1,17 @@
 ---
-description: "Report content distribution by language for a content type and flag languages lagging the most-populated language — a multilingual coverage signal."
-argument-hint: "[site] [type] [gapThreshold] [sampleSize]"
+description: "Per-node translation coverage from Sentinel's inventory (missing non-default language, outdated core flag, language counts). Without Sentinel the report is unavailable — JSON:API only shows the default language, so a histogram would be misleading."
+argument-hint: "[site] [type] [sampleSize]"
 ---
 
 Call the MCP tool `drupal_report_translation_coverage`.
 
-Report content distribution by language for a content type and flag languages lagging the most-populated language — a multilingual coverage signal.
+Per-node translation coverage from Sentinel's inventory (missing non-default language, outdated core flag, language counts). Without Sentinel the report is unavailable — JSON:API only shows the default language, so a histogram would be misleading.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
 - `type` (string): Content type (default: article)
-- `gapThreshold` (number): Flag languages below this fraction of the top language
-- `sampleSize` (number)
+- `sampleSize` (number): Max nodes to inventory
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-report-workflow-bottlenecks.md

@@ -1,6 +1,6 @@
 ---
 description: "Find content stuck in a non-published moderation state (draft/needs_review) beyond N days — editorial bottlenecks. Reads moderation_state; gated when content_moderation isn't exposed."
-argument-hint: "[site] [type] [days] [states] [sampleSize]"
+argument-hint: "[site] [type] [days] [states] [langcode] [sampleSize]"
 ---
 
 Call the MCP tool `drupal_report_workflow_bottlenecks`.
@@ -14,6 +14,7 @@ Parse the arguments supplied with this command into this tool's parameters:
 - `type` (string): Content type (default: article)
 - `days` (number): Days-in-state threshold
 - `states` (array (pass as JSON)): Moderation states to treat as bottlenecks
+- `langcode` (string): Limit to this translation (Sentinel inventory). Omit for the default-language field on each node.
 - `sampleSize` (number)
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-set-moderation-state.md

@@ -1,11 +1,11 @@
 ---
-description: "Transition a content node to a moderation state (content_moderation), e.g. 'draft', 'needs_review', 'published', 'archived'. Governed write."
-argument-hint: "<type> <id> <state> [site]"
+description: "Transition a content node to a moderation state (content_moderation), e.g. 'draft', 'needs_review', 'published', 'archived'. Governed write. Pass langcode to change one translation via Sentinel; omit it for the default-language / shared-state write. If moderation_state is not translatable, a langcode write is refused."
+argument-hint: "<type> <id> <state> [site] [langcode]"
 ---
 
 Call the MCP tool `drupal_set_moderation_state`.
 
-Transition a content node to a moderation state (content_moderation), e.g. 'draft', 'needs_review', 'published', 'archived'. Governed write.
+Transition a content node to a moderation state (content_moderation), e.g. 'draft', 'needs_review', 'published', 'archived'. Governed write. Pass langcode to change one translation via Sentinel; omit it for the default-language / shared-state write. If moderation_state is not translatable, a langcode write is refused.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -16,5 +16,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 
 **Optional:**
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `langcode` (string): Target translation (e.g. 'es'). Omit for the default language. Requires Sentinel.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-update-media.md

@@ -1,11 +1,11 @@
 ---
-description: "Update a media entity's name, status, or field values. Partial: omitted fields (status included) are left untouched."
-argument-hint: "<type> <id> [site] [name] [status] [fields]"
+description: "Update a media entity's name, status, or field values. Partial: omitted fields (status included) are left untouched. Pass langcode to continue an unpublished working translation via Sentinel; this does not PATCH canonical langcode and will not create a missing translation — use drupal_create_translation first."
+argument-hint: "<type> <id> [site] [name] [status] [fields] [langcode]"
 ---
 
 Call the MCP tool `drupal_update_media`.
 
-Update a media entity's name, status, or field values. Partial: omitted fields (status included) are left untouched.
+Update a media entity's name, status, or field values. Partial: omitted fields (status included) are left untouched. Pass langcode to continue an unpublished working translation via Sentinel; this does not PATCH canonical langcode and will not create a missing translation — use drupal_create_translation first.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -17,6 +17,7 @@ Parse the arguments supplied with this command into this tool's parameters:
 - `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
 - `name` (string)
 - `status` (boolean (true/false)): Published flag. Only sent when provided; requires allowPublish when true.
-- `fields` (object (pass as JSON)): Field values. Entity-reference values in JSON:API linkage shape ({ data: { type, id } }) are sent as relationships automatically.
+- `fields` (object (pass as JSON)): Field values. Entity-reference values in JSON:API linkage shape ({ data: { type, id } }) are sent as relationships automatically. Image alt is meta.alt on field_media_image with the existing file UUID.
+- `langcode` (string): Target language for an unpublished working translation (e.g. 'es'). Continues that translation via Sentinel; does not create a missing translation and does not PATCH canonical langcode.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-update-menu-link.md

@@ -1,6 +1,6 @@
 ---
 description: "Update a custom menu link by UUID (rename, re-weight, re-target, re-parent, enable/disable). Only the fields you pass change. The link's enabled state is preserved across edits — an unrelated change will not disable a live link — unless you pass 'enabled' explicitly. Checked against the site security config."
-argument-hint: "<id> [site] [title] [link] [menu] [weight] [parent] [enabled]"
+argument-hint: "<id> [site] [title] [link] [menu] [weight] [parent] [enabled] [langcode]"
 ---
 
 Call the MCP tool `drupal_update_menu_link`.
@@ -20,5 +20,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 - `weight` (number): New ordering weight. Omit to leave unchanged.
 - `parent` (string): New parent link plugin id (e.g. 'menu_link_content:<uuid>'), or '' for top level. Omit to leave unchanged.
 - `enabled` (boolean (true/false)): Enable/disable the link. Omit to preserve the current state.
+- `langcode` (string): Existing translation to update (e.g. 'es'). Omit for the default language. Does not create a missing translation.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-update-taxonomy-term.md

@@ -1,11 +1,11 @@
 ---
-description: "Update an existing taxonomy term's name, description, or weight."
-argument-hint: "<vocabulary> <id> [site] [name] [description] [weight]"
+description: "Update an existing taxonomy term's name, description, or weight. Pass langcode to update an existing translation; this does not create a missing translation."
+argument-hint: "<vocabulary> <id> [site] [name] [description] [weight] [langcode]"
 ---
 
 Call the MCP tool `drupal_update_taxonomy_term`.
 
-Update an existing taxonomy term's name, description, or weight.
+Update an existing taxonomy term's name, description, or weight. Pass langcode to update an existing translation; this does not create a missing translation.
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -18,5 +18,6 @@ Parse the arguments supplied with this command into this tool's parameters:
 - `name` (string)
 - `description` (string)
 - `weight` (number)
+- `langcode` (string): Existing translation to update (e.g. 'es'). Omit for the default language.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/CHANGELOG.md

@@ -7,6 +7,61 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.17.0] - 2026-09-11
+
+### Added
+- **Governed media draft translation (#296).** `drupal_create_translation` and
+  `drupal_list_translations` accept `entityType: "media"`. Continue with
+  `drupal_update_media` + `langcode`; read with `drupal_get_media` + `langcode`.
+  Same Sentinel `/mcp-draft` live/working pair as nodes (d.o #3622412). Image
+  alt/title are kept on the file relationship (`meta.alt` / `meta.title`) so a
+  translator can read the source. Canonical media writes without `langcode` are
+  unchanged. Requires MCP Sentinel with media draft routes.
+
+### Security
+- Bump transitive `hono` 4.13.1 → 4.13.7 (via `@modelcontextprotocol/node`)
+  and override it to `^4.13.5`, clearing three moderate advisories:
+  GHSA-gqvv-2mrq-wpjv (`toSSG()` path traversal), GHSA-g6gw-c38x-mqfc
+  (`parseBody()` unbounded nesting), and GHSA-crvj-82cr-hjcx (query parser
+  after URL fragment). `npm audit` reports 0 vulnerabilities (#299).
+
+## [2.16.0] - 2026-09-11
+
+### Added
+- **Optional graphql_compose_codegen tools (#308).**
+  `drupal_codegen_inspect`, `drupal_codegen_diff`, and `drupal_codegen_generate`
+  call `drush graphql-compose-codegen:*` over the existing SSH bridge.
+  Generate is `--dry-run` only (artefacts as text; no `--output-dir`).
+  Missing module or unknown command fails loud. If `allowedCommands` is set,
+  the matching `graphql-compose-codegen:*` subcommand must be listed.
+- **Field `translatable`, taxonomy/menu `langcode`, and composed node reads (#303).**
+  `drupal_describe_fields` copies Field API `translatable` when JSON:API
+  `field_config` is readable (omitted means unknown). Taxonomy get/update and
+  menu-link update accept optional `langcode` (existing translations only).
+  `drupal_get_node` accepts `includeComponents` (default false) to attach
+  pinned paragraph translations.
+- **Optional `langcode` on the editorial queue (#303).**
+  `drupal_content_by_moderation_state` and `drupal_set_moderation_state` accept
+  a translation language. Omitting it keeps the previous default-language
+  behavior. A langcode write uses Sentinel's draft-translation surface (no
+  canonical `langcode` PATCH). A langcode list uses the translation inventory;
+  without Sentinel the result is `unavailable`. `drupal_report_workflow_bottlenecks`
+  has the same optional filter.
+
+### Changed
+- **`drupal_list_translations` passes through core outdated/source (#303).**
+  When Sentinel sends `content_translation_outdated` / `content_translation_source`,
+  those keys appear on each row. They are omitted when absent.
+- **`drupal_report_translation_coverage` uses Sentinel inventory (#303).**
+  Per-node missing non-default language and outdated flags replace the
+  default-language histogram. Without Sentinel the report is `unavailable`
+  rather than a misleading 100% default-language chart.
+- **Public product name is Drupal MCP Connector (#301).** Document titles and
+  the MCP handshake `serverInfo.title` now use the title-case product name.
+  The machine identifiers are unchanged: npm package, GitHub repo, binaries,
+  `X-MCP-Client`, log prefixes, and `serverInfo.name` remain
+  `drupal-mcp-connector`.
+
 ## [2.15.2] - 2026-09-11
 
 ### Fixed
@@ -1583,6 +1638,8 @@ The connector is now **dual-protocol**: every tool runs against an abstract back
 - User tools gained explicit PII-access assertions.
 - Whole tree lint-clean (`npm run lint`) with object-injection sinks rewritten to safe lookups.
 
+[2.17.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.17.0
+[2.16.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.16.0
 [2.15.2]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.15.2
 [2.15.1]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.15.1
 [2.15.0]: https://github.com/Wilkes-Liberty/drupal-mcp-connector/releases/tag/v2.15.0

package/README.md

@@ -1,6 +1,6 @@
-# drupal-mcp-connector
+# Drupal MCP Connector
 
-> A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL access, governed draft translations, content tools, audit reports, and an SSH Drush bridge.
+> Drupal MCP Connector — multi-site MCP server for Drupal with JSON:API and GraphQL, governed writes, draft translations, content tools, audit reports, and an SSH Drush bridge.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D20-green)](https://nodejs.org)
@@ -15,7 +15,7 @@ Built by **[Jeremy Michael Cerda](https://www.drupal.org/u/jmcerda)** (opensourc
 
 ## What It Does
 
-`drupal-mcp-connector` connects any [Model Context Protocol](https://modelcontextprotocol.io) client to one or more Drupal sites. It exposes Drupal content and configuration as a set of MCP **tools**, **resources**, and **prompts**, so an MCP client can read, audit, and (where permitted) write content through structured, governed operations instead of the admin UI:
+**Drupal MCP Connector** (`drupal-mcp-connector`) connects any [Model Context Protocol](https://modelcontextprotocol.io) client to one or more Drupal sites. It exposes Drupal content and configuration as a set of MCP **tools**, **resources**, and **prompts**, so an MCP client can read, audit, and (where permitted) write content through structured, governed operations instead of the admin UI:
 
 ```
 "Find all articles missing a meta description and list them."

package/bin/drupal-mcp-agent.js

@@ -25,7 +25,7 @@ import { readFileSync } from "node:fs";
 import { connect as netConnect } from "node:net";
 import { connect as tlsConnect } from "node:tls";
 import process from "node:process";
-import { CLIENT_VERSION, listSiteNames, loadConfig } from "../src/lib/config.js";
+import { CLIENT_VERSION, SERVER_INFO, listSiteNames, loadConfig } from "../src/lib/config.js";
 import { callTool, listResolvableSiteConfigs } from "../src/lib/dispatch.js";
 import { filterDiscoverableTools } from "../src/lib/governance.js";
 import {
@@ -110,7 +110,7 @@ async function discoverableTools() {
 }
 
 const surface = {
-  serverInfo: { name: "drupal-mcp-connector", version: CLIENT_VERSION },
+  serverInfo: SERVER_INFO,
   tools: {
     definitions: allDefinitions,
     list: discoverableTools,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "drupal-mcp-connector",
-  "version": "2.15.2",
-  "description": "A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL access, governed draft translations, content tools, audit reports, and an SSH Drush bridge.",
+  "version": "2.17.0",
+  "description": "Drupal MCP Connector — multi-site MCP server for Drupal with JSON:API and GraphQL, governed writes, draft translations, content tools, audit reports, and an SSH Drush bridge.",
   "type": "module",
   "main": "src/index.js",
   "bin": {
@@ -83,6 +83,7 @@
   },
   "overrides": {
     "@hono/node-server": "^2.0.5",
+    "hono": "^4.13.5",
     "postcss": "^8.5.18"
   }
 }

package/scripts/generate-commands.js

@@ -134,7 +134,7 @@ export function renderCodexSkillMarkdown(definitions = allDefinitions) {
     "---",
     `name: ${yamlString(CODEX_SKILL_NAME)}`,
     `description: ${yamlString(
-      "Use Drupal MCP tools (drupal_*) via drupal-mcp-connector to read or write Drupal content, media, taxonomy, reports, and config. Trigger when the user asks to work with a Drupal site over MCP.",
+      "Use Drupal MCP tools (drupal_*) via Drupal MCP Connector (drupal-mcp-connector) to read or write Drupal content, media, taxonomy, reports, and config. Trigger when the user asks to work with a Drupal site over MCP.",
     )}`,
     "---",
     "",
@@ -161,7 +161,7 @@ export function renderCodexToolsReference(definitions = allDefinitions) {
   const lines = [
     "# Drupal MCP tools",
     "",
-    "Protocol tool names for `drupal-mcp-connector`. Call these via MCP; do not invent REST paths.",
+    "Protocol tool names for Drupal MCP Connector. Call these via MCP; do not invent REST paths.",
     "",
   ];
   for (const def of definitions) {

package/src/index.js

@@ -33,7 +33,7 @@ import { createMcpHandler } from "@modelcontextprotocol/server";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { toNodeHandler } from "@modelcontextprotocol/node";
 
-import { listSiteNames, getTlsConfig, loadConfig, CLIENT_VERSION } from "./lib/config.js";
+import { listSiteNames, getTlsConfig, loadConfig, CLIENT_VERSION, SERVER_INFO } from "./lib/config.js";
 import { loadLocalSecrets, secretLoadFatalMessage, secretTableMismatchMessage } from "./lib/load-secrets.js";
 import {
   makeBearerCheck,
@@ -291,7 +291,7 @@ function getPromptMessages(name, args) {
 // ---------------------------------------------------------------------------
 
 const buildConnectorServer = createConnectorServerFactory({
-  serverInfo: { name: "drupal-mcp-connector", version: CLIENT_VERSION },
+  serverInfo: SERVER_INFO,
   tools: {
     definitions: allDefinitions,
     list: discoverableTools,