drupal-mcp-connector 2.2.0 → 2.2.1

package/.claude/commands/drupal-create-node.md

@@ -1,6 +1,6 @@
 ---
 description: "Create a new content node. Returns the new node UUID, integer ID, and URL. For content types under an editorial (content_moderation) workflow, set moderationState (e.g. 'draft'/'published') instead of status. Entity-reference fields (taxonomy terms, related content, media) go in `relationships`, not `fields`."
-argument-hint: "<type> <title> [site] [body] [summary] [status] [moderationState] [fields] [relationships] [dryRun] [returning]"
+argument-hint: "<type> <title> [site] [body] [summary] [format] [status] [moderationState] [fields] [relationships] [dryRun] [returning]"
 allowed-tools: mcp__drupal__drupal_create_node
 ---
 
@@ -17,7 +17,8 @@ Parse the request in `$ARGUMENTS` into this tool's parameters:
 **Optional:**
 - `site` (string): omit for the default site
 - `body` (string): Body field HTML
-- `summary` (string): Body summary / teaser
+- `summary` (string): Body summary/teaser — writes the `summary` property of the body field (core `text_with_summary`). Many headless sites instead use a dedicated summary/deck field for teasers and meta descriptions; on those, set that field in `fields` — a value written here will be stored but may never be rendered.
+- `format` (string): Text format machine name for the body, e.g. 'basic_html'. Defaults to the site config's `defaultTextFormat`, then 'full_html'. Set this when the site's formats do not include full_html, or to avoid writing content into a more permissive format than intended.
 - `status` (boolean (true/false)): Published flag for NON-moderated types. true to publish immediately. Ignored if moderationState is set; on a moderated type it is dropped automatically.
 - `moderationState` (string): Moderation state for content_moderation types, e.g. 'draft' or 'published'. Takes precedence over status.
 - `fields` (object (pass as JSON)): Scalar/attribute field values keyed by Drupal machine name. Do NOT put entity-reference fields here — Drupal rejects them as attributes; use `relationships`.

package/.claude/commands/drupal-update-node.md

@@ -1,6 +1,6 @@
 ---
 description: "Update an existing node. Only include fields you want to change. For moderated content types, use moderationState (e.g. 'published') rather than status. When the target is published and moderated and you omit moderationState, the connector defaults the write to moderation_state 'draft' (forward revision) so live default revisions are not mutated by accident. Entity-reference fields go in `relationships`, not `fields`."
-argument-hint: "<type> <id> [site] [title] [body] [summary] [status] [moderationState] [fields] [relationships] [dryRun] [returning]"
+argument-hint: "<type> <id> [site] [title] [body] [summary] [format] [status] [moderationState] [fields] [relationships] [dryRun] [returning]"
 allowed-tools: mcp__drupal__drupal_update_node
 ---
 
@@ -18,7 +18,8 @@ Parse the request in `$ARGUMENTS` into this tool's parameters:
 - `site` (string): omit for the default site
 - `title` (string)
 - `body` (string)
-- `summary` (string)
+- `summary` (string): Body summary/teaser — writes the `summary` property of the body field (core `text_with_summary`). Many headless sites instead use a dedicated summary/deck field for teasers and meta descriptions; on those, set that field in `fields` — a value written here will be stored but may never be rendered.
+- `format` (string): Text format machine name for the body, e.g. 'basic_html'. Defaults to the site config's `defaultTextFormat`, then 'full_html'. Set this when the site's formats do not include full_html, or to avoid writing content into a more permissive format than intended.
 - `status` (boolean (true/false)): Published flag for NON-moderated types: true = publish, false = unpublish. Ignored if moderationState is set.
 - `moderationState` (string): Moderation state transition for content_moderation types, e.g. 'draft', 'published', 'archived'. Takes precedence over status. Required to keep or re-publish a live node — omitting it on a published moderated node defaults the write to 'draft'.
 - `fields` (object (pass as JSON)): Scalar/attribute field values keyed by machine name. Entity-reference fields go in `relationships`, not here.

package/CHANGELOG.md

@@ -7,6 +7,56 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.2.1] - 2026-08-02
+
+### Fixed
+- **The body text format is no longer hardcoded to `full_html`.** Node writes
+  that used the `body` convenience parameter always sent `format: "full_html"`,
+  so the connector could not write a body at all on a site whose text formats
+  omit it — and on sites that do define it, content was silently written into
+  the most permissive core format. Writes now resolve the format explicitly: a
+  new per-call `format` argument, then the site config's `defaultTextFormat`,
+  then `full_html` as the unchanged last-resort fallback. A text format is
+  Drupal's HTML-filtering boundary, so it should be a decision rather than an
+  assumption.
+- **A body-only update no longer blanks an existing body summary.** The body
+  descriptor set `summary: ""` whenever no summary was supplied, so updating
+  just the body erased the summary as a side effect. The property is now sent
+  only when the caller supplies it; passing `summary: ""` still clears it
+  deliberately.
+
+### Changed
+- **`summary` documents what it actually targets.** The parameter writes the
+  `summary` property of the core `text_with_summary` body field. Headless sites
+  commonly use a dedicated summary/deck field for teasers and meta descriptions
+  instead; on those, the value written here is stored but may never be rendered.
+  Both node tools now say so, and point at `fields` for the dedicated field.
+
+### Added
+- **`@claude` GitHub Action (inline).** Maintainers can tag `@claude` on an
+  issue or PR and Claude acts on the repo and opens a PR. Only
+  owner/member/collaborator authors trigger it; bot actors are excluded; the
+  job runs on `ubuntu-latest`, stops at opening a PR, and adds no AI
+  attribution. Inert until the Claude GitHub App is installed and the
+  `CLAUDE_CODE_OAUTH_TOKEN` org secret is made visible to this repo.
+- **CI: No AI attribution gate.** Pull requests fail when commits, the
+  PR title, or the PR body credit AI with authorship (shared Wilkes & Liberty
+  drop-in). Covers server-side paths that local hooks cannot see.
+
+### Changed
+- **CI: the attribution gate reads its scripts from the base commit.** A
+  pull request can no longer supply the code that decides whether it passes.
+
+### Fixed
+- **CI: the `@claude` workflow can fetch its OIDC token.** The action exchanges
+  a GitHub OIDC token for its app credentials in every auth mode; without
+  `id-token: write` the first activation run failed before reaching Claude.
+- **CI: the attribution gate no longer fails on clean commits.** The stripper
+  compared each commit message against a copy that had gained a trailing newline,
+  so every commit looked modified and the run ended with `strip count > 0 but tip
+  unchanged`.
+
+
 ## [2.2.0] - 2026-07-30
 
 ### Security

package/README.md

@@ -44,6 +44,13 @@ Each site declares which backend(s) it exposes via the `api` key:
   `{ id, entityType, bundle, title, status, langcode, created, changed, url, fields, relationships, _backend }`, so tool output is identical regardless of protocol.
 - **Capability-aware.** Each backend advertises what it supports (read, write, delete, server-side filter/sort, revisions). GraphQL via GraphQL Compose is **read-only** (no mutations) and has no server-side field filter, so filters are applied client-side over a bounded fetch and flagged `approximate`/`truncated`. Write tools against a read-only backend return a clear capability error rather than failing silently.
 - **Writes go through JSON:API.** Use a JSON:API-enabled site as the write plane; keep GraphQL as a read plane where that suits your architecture.
+- **`defaultTextFormat` sets the body text format** used by the `body` convenience
+  parameter on node writes, e.g. `{ "baseUrl": "…", "defaultTextFormat": "basic_html" }`.
+  Individual calls can override it with `format`. Without either, the connector falls
+  back to `full_html`, which many governed sites deliberately do not define — and which
+  is the most permissive core format, so setting this per site is the safer posture. A
+  text format is Drupal's HTML-filtering boundary, so it is worth choosing deliberately
+  rather than inheriting.
 
 See **[docs/architecture.md](docs/architecture.md)** for the backend abstraction and **[docs/graphql-local-setup.md](docs/graphql-local-setup.md)** for the GraphQL specifics.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drupal-mcp-connector",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "A secure, multi-site Model Context Protocol (MCP) connector for Drupal — dual-protocol JSON:API and GraphQL.",
   "type": "module",
   "main": "src/index.js",

package/src/tools/nodes.js

@@ -127,18 +127,43 @@ async function createRenameRedirect(backend, sec, redirect) {
   }
 }
 
+/**
+ * Fallback text format when neither the call nor the site config names one.
+ *
+ * Retained for backward compatibility only. A site whose text formats do not
+ * include `full_html` — or whose agent account may not use it — must set
+ * `defaultTextFormat` in its site config or pass `format` per call.
+ */
+const FALLBACK_TEXT_FORMAT = "full_html";
+
 /**
  * Build a Drupal body field descriptor from plain HTML + optional summary.
  *
+ * The text format is a security boundary in Drupal (it decides which HTML
+ * survives filtering), so it is resolved explicitly rather than assumed:
+ * an explicit `format` argument wins, then the site's `defaultTextFormat`,
+ * then the historical fallback.
+ *
+ * `summary` is only included when the caller supplied it. Sending an empty
+ * string on every write would blank an existing body summary whenever a
+ * caller updated the body alone.
+ *
  * @param {string} [body]    - Body HTML; when undefined the field is omitted.
- * @param {string} [summary] - Teaser/summary text.
- * @returns {{value: string, format: string, summary: string}|undefined}
+ * @param {string} [summary] - Teaser/summary text; omitted when undefined.
+ * @param {string} [format]  - Text format machine name.
+ * @param {object} [site]    - Site config, read for `defaultTextFormat`.
+ * @returns {{value: string, format: string, summary?: string}|undefined}
  *   A body attribute object, or undefined when no body was supplied (so callers
  *   can skip the field on update rather than blanking it).
  */
-function buildBodyAttribute(body, summary) {
+function buildBodyAttribute(body, summary, format, site) {
   if (body === undefined) return undefined;
-  return { value: body, format: "full_html", summary: summary ?? "" };
+  const attr = {
+    value: body,
+    format: format ?? site?.defaultTextFormat ?? FALLBACK_TEXT_FORMAT,
+  };
+  if (summary !== undefined) attr.summary = summary;
+  return attr;
 }
 
 /**
@@ -228,10 +253,10 @@ async function searchContent({ site: siteName, query, type, status, limit = 10 }
  * `relationships` (JSON:API shape), not `fields`; Drupal rejects reference fields
  * sent as attributes (#115).
  *
- * @param {object} args - { site?, type, title, body?, summary?, status?, moderationState?, fields?, relationships? }.
+ * @param {object} args - { site?, type, title, body?, summary?, format?, status?, moderationState?, fields?, relationships? }.
  * @returns {Promise<object>} The created node descriptor from the backend.
  */
-async function createNode({ site: siteName, type, title, body, summary, status, moderationState, fields = {}, relationships = {}, dryRun = false, returning = "full" }) {
+async function createNode({ site: siteName, type, title, body, summary, format, status, moderationState, fields = {}, relationships = {}, dryRun = false, returning = "full" }) {
   const site = getSiteConfig(siteName);
   const sec = resolveSecurityConfig(site);
   assertWriteAllowed(sec, "create", "node", type);
@@ -241,7 +266,7 @@ async function createNode({ site: siteName, type, title, body, summary, status,
   } else {
     attributes.status = status === undefined ? false : status;
   }
-  const bodyAttr = buildBodyAttribute(body, summary);
+  const bodyAttr = buildBodyAttribute(body, summary, format, site);
   if (bodyAttr) attributes.body = bodyAttr;
   assertPublishAllowed(sec, attributes);
   if (dryRun) return { dryRun: true, operation: "create", entityType: "node", bundle: type, attributes, relationships };
@@ -279,10 +304,10 @@ async function createNode({ site: siteName, type, title, body, summary, status,
  *
  * Entity-reference fields go in `relationships` (JSON:API shape), not `fields` (#115).
  *
- * @param {object} args - { site?, type, id, title?, body?, summary?, status?, moderationState?, fields?, relationships? }.
+ * @param {object} args - { site?, type, id, title?, body?, summary?, format?, status?, moderationState?, fields?, relationships? }.
  * @returns {Promise<object>} The updated node descriptor.
  */
-async function updateNode({ site: siteName, type, id, title, body, summary, status, moderationState, fields = {}, relationships = {}, dryRun = false, returning = "full" }) {
+async function updateNode({ site: siteName, type, id, title, body, summary, format, status, moderationState, fields = {}, relationships = {}, dryRun = false, returning = "full" }) {
   const site = getSiteConfig(siteName);
   const sec = resolveSecurityConfig(site);
   assertWriteAllowed(sec, "update", "node", type);
@@ -291,7 +316,7 @@ async function updateNode({ site: siteName, type, id, title, body, summary, stat
   if (title !== undefined) attributes.title = title;
   if (moderationState !== undefined) attributes.moderation_state = moderationState;
   else if (status !== undefined) attributes.status = status;
-  const bodyAttr = buildBodyAttribute(body, summary);
+  const bodyAttr = buildBodyAttribute(body, summary, format, site);
   if (bodyAttr) attributes.body = bodyAttr;
   // #131: published moderated nodes without an explicit state → draft forward revision.
   // Runs before the publish gate and on dryRun so previews match the real write.
@@ -390,7 +415,8 @@ export const definitions = [
         type:    { type: "string", description: "Content type machine name" },
         title:   { type: "string" },
         body:    { type: "string", description: "Body field HTML" },
-        summary: { type: "string", description: "Body summary / teaser" },
+        summary: { type: "string", description: "Body summary/teaser — writes the `summary` property of the body field (core `text_with_summary`). Many headless sites instead use a dedicated summary/deck field for teasers and meta descriptions; on those, set that field in `fields` — a value written here will be stored but may never be rendered." },
+        format:  { type: "string", description: "Text format machine name for the body, e.g. 'basic_html'. Defaults to the site config's `defaultTextFormat`, then 'full_html'. Set this when the site's formats do not include full_html, or to avoid writing content into a more permissive format than intended." },
         status:  { type: "boolean", default: false, description: "Published flag for NON-moderated types. true to publish immediately. Ignored if moderationState is set; on a moderated type it is dropped automatically." },
         moderationState: { type: "string", description: "Moderation state for content_moderation types, e.g. 'draft' or 'published'. Takes precedence over status." },
         fields:  { type: "object", description: "Scalar/attribute field values keyed by Drupal machine name. Do NOT put entity-reference fields here — Drupal rejects them as attributes; use `relationships`." },
@@ -411,7 +437,8 @@ export const definitions = [
         id:      { type: "string", description: "Node UUID" },
         title:   { type: "string" },
         body:    { type: "string" },
-        summary: { type: "string" },
+        summary: { type: "string", description: "Body summary/teaser — writes the `summary` property of the body field (core `text_with_summary`). Many headless sites instead use a dedicated summary/deck field for teasers and meta descriptions; on those, set that field in `fields` — a value written here will be stored but may never be rendered." },
+        format:  { type: "string", description: "Text format machine name for the body, e.g. 'basic_html'. Defaults to the site config's `defaultTextFormat`, then 'full_html'. Set this when the site's formats do not include full_html, or to avoid writing content into a more permissive format than intended." },
         status:  { type: "boolean", description: "Published flag for NON-moderated types: true = publish, false = unpublish. Ignored if moderationState is set." },
         moderationState: { type: "string", description: "Moderation state transition for content_moderation types, e.g. 'draft', 'published', 'archived'. Takes precedence over status. Required to keep or re-publish a live node — omitting it on a published moderated node defaults the write to 'draft'." },
         fields:  { type: "object", description: "Scalar/attribute field values keyed by machine name. Entity-reference fields go in `relationships`, not here." },