drupal-mcp-connector 2.25.0 → 3.0.0

package/src/lib/workflow-prompts.js

@@ -110,7 +110,7 @@ export function normalizeWorkflow(raw) {
  * @param {string} namespace
  * @returns {string}
  */
-export function resolvedName(def, namespace) {
+function resolvedName(def, namespace) {
   return def.name || workflowPromptName(namespace, def.id);
 }
 
@@ -141,7 +141,7 @@ export function publicToolName(namespace, alias, tools) {
  * @param {{builtin?: boolean}} [opts]
  * @returns {string[]|null} Public names, or null when any tool is missing.
  */
-export function resolveToolNames(def, namespace, tools, opts = {}) {
+function resolveToolNames(def, namespace, tools, opts = {}) {
   const visible = new Set((tools ?? []).map((tool) => tool.name));
   const names = [];
   for (const alias of def.tools) {
@@ -270,7 +270,7 @@ export function renderWorkflowMessages(workflow, args = {}) {
  * @param {string} instructions
  * @returns {string[]}
  */
-export function toolAliasesInInstructions(instructions) {
+function toolAliasesInInstructions(instructions) {
   const aliases = [];
   const seen = new Set();
   for (const match of String(instructions ?? "").matchAll(/\{tool:([a-z][a-z0-9_]{0,47})\}/g)) {
@@ -287,7 +287,7 @@ export function toolAliasesInInstructions(instructions) {
  * @param {object} got
  * @returns {string}
  */
-export function instructionTextFromDrupalPrompt(got) {
+function instructionTextFromDrupalPrompt(got) {
   const messages = Array.isArray(got?.messages) ? got.messages : [];
   const parts = [];
   for (const message of messages) {
@@ -313,7 +313,7 @@ export function instructionTextFromDrupalPrompt(got) {
  * @param {object} toolsMap `serverTools.modules.tools`
  * @returns {boolean}
  */
-export function inferReadOnly(aliases, toolsMap) {
+function inferReadOnly(aliases, toolsMap) {
   for (const alias of aliases) {
     const operation = toolsMap?.[alias]?.operation;
     if (operation === "write" || operation === "delete") return false;

package/src/tools/audit-composite.js

@@ -26,16 +26,16 @@ import * as reportsContent from "./reports-content.js";
 const SECTIONS = [
   // Content
   { key: "content_summary", group: "content", run: (o) => reports.handlers.drupal_report_content_summary({ site: o.site }), score: () => ({ issues: 0, high: 0 }) },
-  { key: "stale_content", group: "content", run: (o) => reports.handlers.drupal_report_stale_content({ site: o.site, type: o.type, days: 180, limit: o.sampleSize }), score: (r) => ({ issues: (r.findings || r.nodes || []).length, high: 0 }) },
-  { key: "seo_audit", group: "content", run: (o) => reports.handlers.drupal_report_seo_audit({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: sumIssueCounts(r.issues), high: 0 }) },
-  { key: "accessibility", group: "content", run: (o) => reports.handlers.drupal_report_accessibility_audit({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: sumIssueCounts(r.issues), high: 0 }) },
-  { key: "duplicate_content", group: "content", run: (o) => reportsContent.handlers.drupal_report_duplicate_content({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: r.duplicateGroups || 0, high: 0 }) },
-  { key: "readability", group: "content", run: (o) => reportsContent.handlers.drupal_report_readability({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: (r.hardToRead || []).length, high: 0 }) },
-  { key: "pii_exposure", group: "content", run: (o) => reportsContent.handlers.drupal_report_pii_exposure({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: r.flaggedNodes || 0, high: r.flaggedNodes || 0 }) },
+  { key: "stale_content", needsType: true, group: "content", run: (o) => reports.handlers.drupal_report_stale_content({ site: o.site, type: o.type, days: 180, limit: o.sampleSize }), score: (r) => ({ issues: (r.findings || r.nodes || []).length, high: 0 }) },
+  { key: "seo_audit", needsType: true, group: "content", run: (o) => reports.handlers.drupal_report_seo_audit({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: sumIssueCounts(r.issues), high: 0 }) },
+  { key: "accessibility", needsType: true, group: "content", run: (o) => reports.handlers.drupal_report_accessibility_audit({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: sumIssueCounts(r.issues), high: 0 }) },
+  { key: "duplicate_content", needsType: true, group: "content", run: (o) => reportsContent.handlers.drupal_report_duplicate_content({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: r.duplicateGroups || 0, high: 0 }) },
+  { key: "readability", needsType: true, group: "content", run: (o) => reportsContent.handlers.drupal_report_readability({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: (r.hardToRead || []).length, high: 0 }) },
+  { key: "pii_exposure", needsType: true, group: "content", run: (o) => reportsContent.handlers.drupal_report_pii_exposure({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: r.flaggedNodes || 0, high: r.flaggedNodes || 0 }) },
   // Links
-  { key: "broken_links", group: "links", run: (o) => reportsLinks.handlers.drupal_report_broken_links({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: r.summary?.malformed || 0, high: 0 }) },
+  { key: "broken_links", needsType: true, group: "links", run: (o) => reportsLinks.handlers.drupal_report_broken_links({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: r.summary?.malformed || 0, high: 0 }) },
   { key: "redirect_health", group: "links", run: (o) => reportsLinks.handlers.drupal_report_redirect_health({ site: o.site }), score: (r) => ({ issues: (r.summary?.duplicateSources || 0) + (r.summary?.chains || 0) + (r.summary?.loops || 0), high: r.summary?.loops || 0 }) },
-  { key: "alias_coverage", group: "links", run: (o) => reportsLinks.handlers.drupal_report_alias_coverage({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: (r.totalMissingAlias || 0) + (r.aliasConflicts?.conflicting?.length || 0), high: 0 }) },
+  { key: "alias_coverage", needsType: true, group: "links", run: (o) => reportsLinks.handlers.drupal_report_alias_coverage({ site: o.site, type: o.type, sampleSize: o.sampleSize }), score: (r) => ({ issues: (r.totalMissingAlias || 0) + (r.aliasConflicts?.conflicting?.length || 0), high: 0 }) },
   { key: "log_404", group: "links", run: (o) => reportsLinks.handlers.drupal_report_404_log({ site: o.site }), score: (r) => ({ issues: (r.findings || []).length, high: 0 }) },
   // Config
   { key: "config_best_practices", group: "config", run: (o) => reportsConfig.handlers.drupal_audit_config_best_practices({ site: o.site }), score: (r) => ({ issues: (r.counts?.high || 0) + (r.counts?.medium || 0) + (r.counts?.low || 0), high: r.counts?.high || 0 }) },
@@ -81,10 +81,13 @@ function grade(high, issues) {
 /**
  * Run a battery of audits and roll the results into a scored dashboard.
  *
+ * Sections that audit one content type (`needsType`) are reported unavailable
+ * when `type` is omitted; there is no default bundle (#403).
+ *
  * @param {object} args - { site?, type?, sampleSize?, sections? }.
  * @returns {Promise<object>} The dashboard: per-section status + a roll-up grade.
  */
-async function siteHealth({ site: siteName, type = "article", sampleSize = 50, sections }) {
+async function siteHealth({ site: siteName, type, sampleSize = 50, sections }) {
   const site = getSiteConfig(siteName);
   const selected = sections && sections.length
     ? SECTIONS.filter((s) => sections.includes(s.key))
@@ -95,6 +98,13 @@ async function siteHealth({ site: siteName, type = "article", sampleSize = 50, s
   let totalHigh = 0;
   let totalIssues = 0;
   for (const section of selected) {
+    if (section.needsType && !type) {
+      results.push({
+        key: section.key, group: section.group, status: "unavailable",
+        reason: "This section audits one content type: pass type. Call drupal_list_content_types to see the bundles on this site.",
+      });
+      continue;
+    }
     try {
       const result = await section.run(opts);
       if (isGated(result)) {
@@ -113,7 +123,7 @@ async function siteHealth({ site: siteName, type = "article", sampleSize = 50, s
   const byStatus = (s) => results.filter((r) => r.status === s).length;
   return {
     site: site._name,
-    type,
+    type: type || null,
     grade: grade(totalHigh, totalIssues),
     summary: {
       sectionsRun: results.length,
@@ -139,7 +149,7 @@ export const definitions = [
       type: "object",
       properties: {
         site:       { type: "string" },
-        type:       { type: "string", description: "Primary content type for content/link sections (default: article)" },
+        type:       { type: "string", description: "Content type for the content/link sections. Omit it and those sections are reported unavailable; site-wide sections still run." },
         sampleSize: { type: "number", default: 50, description: "Per-section scan cap (kept small for a fast roll-up)" },
         sections:   { type: "array", items: { type: "string", enum: SECTION_KEYS }, description: `Subset of sections to run (default: all). Available: ${SECTION_KEYS.join(", ")}` },
       },

package/src/tools/codegen.js

@@ -18,7 +18,7 @@
 import { getSiteConfig } from "../lib/config.js";
 import { sshDrush } from "./drush.js";
 import { callBoundModuleTool, toolResultData } from "../lib/server-tools.js";
-import { SecurityError } from "../lib/security.js";
+import { SecurityError, configReadBindingScope } from "../lib/security.js";
 import { validateMachineName } from "../lib/validate.js";
 
 const INSPECT = "graphql-compose-codegen:inspect";
@@ -83,7 +83,7 @@ async function runGqcc(
     ]).get(subcommand);
     const result = toolResultData(await callBoundModuleTool(site, binding, {
       bundles: names, skip_fields: skip,
-    }, { operation: "read", scope: "mcp_config", capabilities: ["configRead"] }));
+    }, { operation: "read", scope: configReadBindingScope(site), capabilities: ["configRead"] }));
     if (result?.success !== true || !result.data || typeof result.data !== "object" || Array.isArray(result.data)) {
       throw new SecurityError("Codegen module returned an invalid result. No SSH fallback was attempted.");
     }

package/src/tools/config.js

@@ -24,6 +24,8 @@ import {
   assertCoreExtensionValueKeepsProtected,
   isCoreExtensionConfig,
   hasScope,
+  hasConfigReadScope,
+  configReadBindingScope,
   CORE_EXTENSION_CONFIG,
   SecurityError,
 } from "../lib/security.js";
@@ -36,8 +38,9 @@ import { callGovernedServerTool, callBoundModuleTool, toolResultData } from "../
  */
 async function configTool(site, binding, args, operation, capability) {
   if (site.serverTools?.bindings !== undefined) {
+    const scope = operation === "read" ? configReadBindingScope(site) : "mcp_config";
     return callBoundModuleTool(site, binding, args, {
-      operation, scope: "mcp_config", capabilities: [capability],
+      operation, scope, capabilities: [capability],
     });
   }
   return callGovernedServerTool(site, binding, args);
@@ -144,7 +147,7 @@ async function assertCoreExtensionWriteAllowed(site, sec, value) {
 async function configSet({ site: siteName, name, value }) {
   const site = getSiteConfig(siteName);
   const sec = resolveSecurityConfig(site);
-  assertConfigScope(site, `config:set ${name}`);
+  assertConfigScope(site, `config:set ${name}`, { write: true });
   assertNotReadOnly(sec, `config:set ${name}`);
   assertConfigWriteAllowed(sec);
   if (isCoreExtensionConfig(name)) await assertCoreExtensionWriteAllowed(site, sec, value);
@@ -188,11 +191,13 @@ async function whoami({ site: siteName, _resolvedSource }) {
   const summary = getSecuritySummary(site);
   // Effective capability = connector preset AND the scope the server demands.
   // Reporting the preset alone over-states what the token can do — e.g. the
-  // content-editor preset allows config reads locally, but every config_* tool
-  // is gated server-side on mcp_config, which the content tier does not hold.
-  // When no OAuth scopes are configured, hasScope() is a no-op (preset-only).
+  // content-editor preset allows config reads locally, but config_* tools are
+  // gated server-side on mcp_config (writes) or mcp_config / mcp_config_read
+  // (reads). The content tier holds neither. When no OAuth scopes are
+  // configured, hasScope() is a no-op (preset-only).
   const canWrite  = !sec.readOnly && hasScope(site, "mcp_write");
   const canConfig = hasScope(site, "mcp_config");
+  const canConfigRead = hasConfigReadScope(site);
   const identity = getRequestIdentity();
   // Dispatch may inject `site` after a default/grant resolution. Prefer the
   // authoritative source so `target` and `_target` cannot disagree (#167).
@@ -212,7 +217,7 @@ async function whoami({ site: siteName, _resolvedSource }) {
       read:        hasScope(site, "mcp_read"),
       write:       canWrite,
       delete:      sec.allowDestructive && canWrite,
-      configRead:  sec.allowConfigRead  && canConfig,
+      configRead:  sec.allowConfigRead  && canConfigRead,
       configWrite: sec.allowConfigWrite && !sec.readOnly && canConfig,
       // Local publish policy (allowPublish), symmetric with delete/config caps.
       // Defaults false in every preset except `development`; the remote Drupal's

package/src/tools/entities.js

@@ -308,7 +308,7 @@ export const definitions = [
         langcode:      { type: "string", description: "Target language for an unpublished working translation (nodes). Continues that translation via Sentinel." },
         attributes:    { type: "object" },
         relationships: { type: "object" },
-        dryRun:        { type: "boolean", default: false, description: "Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. Only an existing node draft (or a langcode translation draft) is checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; field access and entity validation are NOT checked (`core_patch_guard`), so the real write can still fail with a field-access 403 or a 422. Unmoderated targets get no server-side check at all (`none`). A published node with no distinct working copy whose changed timestamp is later than revision_timestamp (possiblyPatchBlocked) fails dryRun the same as the real write (#273). Any refusal fails the dryRun." },
+        dryRun:        { type: "boolean", default: false, description: "Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. Only an existing node draft (or a langcode translation draft) is checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; field access and entity validation are NOT checked (`core_patch_guard`), so the real write can still fail with a field-access 403 or a 422. Unmoderated targets get no server-side check at all (`none`). A changed/revision_timestamp gap on the default revision (possiblyPatchBlocked) is a warning on list_revisions, not a local dryRun refusal — the write proceeds to the core probe / Sentinel (#405). An actual Sentinel stale-copy refusal is still rewritten. Any refusal fails the dryRun." },
         returning:     RETURNING_SCHEMA,
       },
     },

package/src/tools/index.js

@@ -41,7 +41,7 @@ import * as config       from "./config.js";
 import * as codegen      from "./codegen.js";
 import { SITE_PARAM } from "../lib/site-target.js";
 
-export const allModules = [nodes, taxonomy, users, media, graphql, site, entities, reports, drush,
+const allModules = [nodes, taxonomy, users, media, graphql, site, entities, reports, drush,
   revisions, moderation, scheduler, fields, references, bulk, translations, paragraphs, structure, redirects, search, reportsExtra,
   reportsLinks, reportsConfig, reportsContent, auditComposite, config, codegen];
 

package/src/tools/media.js

@@ -15,7 +15,7 @@ import {
   assertReadAllowed, assertWriteAllowed, assertDeleteAllowed, assertPublishAllowed,
 } from "../lib/security.js";
 import {
-  assertDraftLangcode, readDraftTranslation, readTranslationInventory,
+  assertDraftLangcode, readDraftTranslation, readTranslationInventory, isUnpublishedWorkingDraft,
 } from "../lib/sentinel-draft.js";
 import { prepareGuardedPatch, updateEntityGuarded } from "../lib/patch-preflight.js";
 import { entityRevisionId } from "../lib/write-revision.js";
@@ -69,7 +69,7 @@ async function getMedia({ site: siteName, type, id, langcode }) {
     const targetLang = assertDraftLangcode(langcode);
     const inventory = await readTranslationInventory(backend, { entityType: "media", bundle: type, id });
     const workingRow = (inventory.working?.translations ?? []).find((row) => row.langcode === targetLang);
-    if (workingRow && workingRow.status === false && inventory.live?.vid && inventory.working?.vid) {
+    if (workingRow && isUnpublishedWorkingDraft(workingRow) && inventory.live?.vid && inventory.working?.vid) {
       const entity = await readDraftTranslation(backend, {
         entityType: "media", bundle: type, id, langcode: targetLang,
         draftRevision: { liveVid: inventory.live.vid, workingVid: inventory.working.vid },

package/src/tools/nodes.js

@@ -9,6 +9,7 @@
 
 import { getSiteConfig } from "../lib/config.js";
 import { resolveBackend } from "../lib/backends/index.js";
+import { readableNodeBundles, listNodesAcrossBundles } from "../lib/reports-support.js";
 import {
   resolveSecurityConfig, redactCanonicalEntity,
   assertReadAllowed, assertWriteAllowed, assertDeleteAllowed, assertPublishAllowed,
@@ -19,7 +20,9 @@ import { resolveErrRelationships, relationshipsWereSent, paragraphPinsFromEntity
 import { attachWrittenRevisionPair, readWrittenRevision } from "../lib/write-revision.js";
 import { prepareGuardedPatch, updateEntityGuarded } from "../lib/patch-preflight.js";
 import { dryRunChecks, PREFLIGHT_NONE } from "../lib/dry-run-checks.js";
-import { assertDraftLangcode, readDraftTranslation, readTranslationInventory } from "../lib/sentinel-draft.js";
+import {
+  assertDraftLangcode, readDraftTranslation, readTranslationInventory, isUnpublishedWorkingDraft,
+} from "../lib/sentinel-draft.js";
 import { paragraphResourceVersion } from "./paragraphs.js";
 import { assertBodySummaryWritable, attachSummaryDeprecation } from "../lib/body-summary.js";
 import { buildRedirectAttributes, REDIRECT_ENTITY_TYPE } from "./redirects.js";
@@ -294,7 +297,7 @@ async function getNode({ site: siteName, type, id, langcode, resourceVersion, in
     const targetLang = assertDraftLangcode(langcode);
     const inventory = await readTranslationInventory(backend, { entityType: "node", bundle: type, id });
     const workingRow = (inventory.working?.translations ?? []).find((row) => row.langcode === targetLang);
-    if (workingRow && workingRow.status === false && inventory.live?.vid && inventory.working?.vid) {
+    if (workingRow && isUnpublishedWorkingDraft(workingRow) && inventory.live?.vid && inventory.working?.vid) {
       const entity = await readDraftTranslation(backend, {
         entityType: "node", bundle: type, id, langcode: targetLang,
         draftRevision: { liveVid: inventory.live.vid, workingVid: inventory.working.vid },
@@ -355,7 +358,10 @@ async function listNodes({ site: siteName, type, status, filters = [], limit = 2
 }
 
 /**
- * Search nodes by title substring (defaults to the article bundle).
+ * Search nodes by title substring. With `type`, searches that bundle. Without
+ * it, searches every node bundle the connector may read and merges by
+ * `changed` (newest first). A bundle that fails to load fails the search with
+ * the bundle named, so a partial result is never returned as complete (#403).
  *
  * @param {object} args - { site?, query, type?, status?, limit? }.
  * @returns {Promise<object[]>} Redacted matching nodes.
@@ -363,13 +369,15 @@ async function listNodes({ site: siteName, type, status, filters = [], limit = 2
 async function searchContent({ site: siteName, query, type, status, limit = 10 }) {
   const site = getSiteConfig(siteName);
   const sec = resolveSecurityConfig(site);
-  const bundle = type || "article";
-  assertReadAllowed(sec, "node", bundle);
+  assertReadAllowed(sec, "node", type);
   const backend = await resolveBackend(site);
   const filters = [{ field: "title", op: "contains", value: query }];
   if (status !== undefined) filters.push({ field: "status", op: "eq", value: status });
-  const res = await backend.listEntities({ entityType: "node", bundle, filters, sort: [{ field: "changed", dir: "desc" }], page: { limit } });
-  return res.entities.map((e) => redactCanonicalEntity(e, sec, "node"));
+  const descriptor = { filters, sort: [{ field: "changed", dir: "desc" }] };
+  const found = type
+    ? (await backend.listEntities({ ...descriptor, entityType: "node", bundle: type, page: { limit } })).entities
+    : await listNodesAcrossBundles(backend, await readableNodeBundles(backend, sec), descriptor, limit);
+  return found.map((e) => redactCanonicalEntity(e, sec, "node"));
 }
 
 /**
@@ -619,7 +627,7 @@ export const definitions = [
       properties: {
         site:   { type: "string" },
         query:  { type: "string", description: "Search term to match against node titles" },
-        type:   { type: "string", description: "Limit to this content type (default: article)" },
+        type:   { type: "string", description: "Content type machine name. Omit to search every node bundle (merged, newest first); if any bundle cannot be read the search fails and names it." },
         status: { type: "boolean", description: "Filter by publish status" },
         limit:  { type: "number", default: 10 },
       },
@@ -664,7 +672,7 @@ export const definitions = [
         langcode: { type: "string", description: "Target language for an unpublished working translation (e.g. 'es'). Continues that translation via Sentinel; does not create a missing translation and does not PATCH canonical langcode." },
         fields:  { type: "object", description: "Scalar/attribute field values keyed by machine name. Formatted text: a string or { value, format?, summary? }. format must be in the field's allowed_formats; a single allowed format is used when omitted. Entity-reference fields go in `relationships`, not here." },
         relationships: { type: "object", description: "Entity-reference fields as JSON:API relationships, keyed by field machine name. Single-value uses { data: { type, id } }; multi-value uses { data: [{ type, id }, …] }. Paragraph / ERR items must carry meta.target_revision_id — the connector injects it when missing, and fails the write if it cannot. Image alt on a translation uses the existing file UUID plus meta.alt; replacing the file is refused." },
-        dryRun:  { type: "boolean", default: false, description: "Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. Only an existing node draft (or a langcode translation draft) is checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; Drupal does not check field access or entity validation on that probe (`core_patch_guard`). Text format is resolved before the preview returns, including on that path: a known allowed_formats list is enforced, and an unknown list reuses the format stored on the field. Other fields can still fail the real write with a field-access 403 or a validation 422. Unmoderated targets get no server-side check at all (`none`). A published node with no distinct working copy whose changed timestamp is later than revision_timestamp (possiblyPatchBlocked) fails dryRun the same as the real write (#273). Any refusal fails the dryRun." },
+        dryRun:  { type: "boolean", default: false, description: "Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. Only an existing node draft (or a langcode translation draft) is checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; Drupal does not check field access or entity validation on that probe (`core_patch_guard`). Text format is resolved before the preview returns, including on that path: a known allowed_formats list is enforced, and an unknown list reuses the format stored on the field. Other fields can still fail the real write with a field-access 403 or a validation 422. Unmoderated targets get no server-side check at all (`none`). A changed/revision_timestamp gap on the default revision (possiblyPatchBlocked) is a warning on list_revisions, not a local dryRun refusal — the write proceeds to the core probe / Sentinel (#405). An actual Sentinel stale-copy refusal is still rewritten. Any refusal fails the dryRun." },
         returning: RETURNING_SCHEMA,
       },
     },

package/src/tools/reports-config.js

@@ -18,7 +18,7 @@
  */
 
 import { getSiteConfig } from "../lib/config.js";
-import { resolveSecurityConfig, assertConfigReadAllowed } from "../lib/security.js";
+import { resolveSecurityConfig, assertConfigReadAllowed, configReadBindingScope } from "../lib/security.js";
 import { gatedReport } from "../lib/reports-support.js";
 import { callGovernedServerTool, callBoundModuleTool, toolResultData } from "../lib/server-tools.js";
 import { runPrivileged, serverToolsConfigured, drushConfigured } from "../lib/audit-sources.js";
@@ -67,7 +67,7 @@ function configSourceAvailable(site) {
 async function readConfig(site, name) {
   if (site.serverTools?.bindings !== undefined) {
     return toolResultData(await callBoundModuleTool(site, "configGet", { name }, {
-      operation: "read", scope: "mcp_config", capabilities: ["configRead"],
+      operation: "read", scope: configReadBindingScope(site), capabilities: ["configRead"],
     }));
   }
   if (serverToolsConfigured(site)) {
@@ -89,7 +89,7 @@ async function readConfig(site, name) {
 async function listConfigNames(site, prefix) {
   if (site.serverTools?.bindings !== undefined) {
     return pickConfigNames(toolResultData(await callBoundModuleTool(site, "configList", { prefix }, {
-      operation: "read", scope: "mcp_config", capabilities: ["configRead"],
+      operation: "read", scope: configReadBindingScope(site), capabilities: ["configRead"],
     })));
   }
   if (serverToolsConfigured(site)) {