drupal-mcp-connector 3.1.0 → 3.2.1

package/.agents/commands/drupal-draft-nested-components.md

@@ -0,0 +1,26 @@
+---
+description: "Replace nested paragraphs on a node by creating new unpublished paragraphs and pinning a new direct parent from the node's unpublished draft. children is the full new list: { op: 'keep', id } copies an existing child pin, { op: 'replace', id, type, attributes, translations? } or { op: 'insert', type, attributes, translations? } creates a new child. Omitting a child leaves it off the draft only; it is not deleted. The published host and every paragraph it already pins stay unchanged. Never edits a live child and never sends nested UUIDs as mcp_components (use drupal_update_node components for a direct paragraph's attributes). Reusable library items and from_library children are refused; update the library item with drupal_entity_update. The first host draft requires MCP Sentinel 2.29.0 (open_draft). An existing working copy continues through /mcp-draft. When the host inventory advertises nested_replacement, one /mcp-draft carries meta.mcp_nested_replacement (parent is the parentId input), the connector creates no paragraphs, and it does not also send the host paragraph field. dryRun then uses that non-saving preflight (serverPreflight sentinel_draft). Hosts that do not advertise nested_replacement keep this sequence, including resumeParentId, and dryRun leaves serverPreflight none. New paragraphs are created in the host's default language. The new parent keeps the published parent's other references and replaces only the child field. Non-default translations on the component must be supplied on each replace or insert; they are created on the new paragraphs, and the component's own translations are copied onto the new parent. dryRun checks paragraph-create permission, creates nothing, and does not evaluate the host payload. If paragraph creates succeed and the host pin fails, the error lists the prepared UUIDs. When a parent was prepared, retry with resumeParentId and the same children list; that retry checks the prepared paragraph's fields, other references, and child revision pins before any host write. A failure before a parent exists says to delete the prepared paragraphs and does not offer a host retry. A lost response is uncertain until a re-read proves the prepared revision is pinned; the same UUID at another revision is not success. A second call after success is refused while the forward draft no longer pins the published component. Governed by the site security policy. Nothing is published."
+argument-hint: "<bundle> <id> <field> <parentId> <childField> <children> [site] [liveRevisionId] [resumeParentId] [dryRun]"
+---
+
+Call the MCP tool `drupal_draft_nested_components`.
+
+Replace nested paragraphs on a node by creating new unpublished paragraphs and pinning a new direct parent from the node's unpublished draft. children is the full new list: { op: 'keep', id } copies an existing child pin, { op: 'replace', id, type, attributes, translations? } or { op: 'insert', type, attributes, translations? } creates a new child. Omitting a child leaves it off the draft only; it is not deleted. The published host and every paragraph it already pins stay unchanged. Never edits a live child and never sends nested UUIDs as mcp_components (use drupal_update_node components for a direct paragraph's attributes). Reusable library items and from_library children are refused; update the library item with drupal_entity_update. The first host draft requires MCP Sentinel 2.29.0 (open_draft). An existing working copy continues through /mcp-draft. When the host inventory advertises nested_replacement, one /mcp-draft carries meta.mcp_nested_replacement (parent is the parentId input), the connector creates no paragraphs, and it does not also send the host paragraph field. dryRun then uses that non-saving preflight (serverPreflight sentinel_draft). Hosts that do not advertise nested_replacement keep this sequence, including resumeParentId, and dryRun leaves serverPreflight none. New paragraphs are created in the host's default language. The new parent keeps the published parent's other references and replaces only the child field. Non-default translations on the component must be supplied on each replace or insert; they are created on the new paragraphs, and the component's own translations are copied onto the new parent. dryRun checks paragraph-create permission, creates nothing, and does not evaluate the host payload. If paragraph creates succeed and the host pin fails, the error lists the prepared UUIDs. When a parent was prepared, retry with resumeParentId and the same children list; that retry checks the prepared paragraph's fields, other references, and child revision pins before any host write. A failure before a parent exists says to delete the prepared paragraphs and does not offer a host retry. A lost response is uncertain until a re-read proves the prepared revision is pinned; the same UUID at another revision is not success. A second call after success is refused while the forward draft no longer pins the published component. Governed by the site security policy. Nothing is published.
+
+Parse the arguments supplied with this command into this tool's parameters:
+
+**Required:**
+- `bundle` (string): Node bundle machine name, e.g. 'page'
+- `id` (string): Node UUID
+- `field` (string): Host entity-reference-revisions field that pins the direct parent, e.g. 'field_components'
+- `parentId` (string): UUID of the direct paragraph the published host pins. Not a nested child.
+- `childField` (string): Entity-reference-revisions field on that direct paragraph, e.g. 'field_items'
+- `children` (array (pass as JSON)): Full new child list, in order. keep: { op, id }. replace: { op, id, type, attributes, translations? }. insert: { op, type, attributes, translations? }. translations is [{ langcode, attributes }] for each non-default language the component already has. Relationships inside a child are refused.
+
+**Optional:**
+- `site` (string): Named site from connector config. Omit only on reads: multi-site configs fall back to defaultSite (often local/dev, not production). Writes require an explicit site when more than one site is configured. Every response includes `_target` { name, baseUrl, source } (`hint` when you passed site, `default` when you did not).
+- `liveRevisionId` (string): Optional published revision id. Refused before any create when it is not the current live revision.
+- `resumeParentId` (string): Prepared parent UUID from a previous attempt whose host pin did not finish. Retries only the host pin. Must not be a paragraph the published host already pins.
+- `dryRun` (boolean (true/false)): When nested_replacement is advertised, run that non-saving /mcp-draft preflight and create nothing (checks.serverPreflight is sentinel_draft). Otherwise read the host and component, then return without creating paragraphs or evaluating the host draft payload (checks.serverPreflight is none).
+
+If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-entity-update.md

@@ -1,11 +1,11 @@
 ---
-description: "Update an existing entity of any Drupal entity type. Only include attributes/relationships you want to change. Published moderated targets without an explicit attributes.moderation_state default to moderation_state 'draft' (forward revision). Paragraph / ERR identifiers are resolved to include meta.target_revision_id before PATCH; the write fails if any ref cannot be resolved. On moderated targets a non-saving PATCH preflight runs first (including dryRun) against the same URL the write will hit. An addressable node draft uses Sentinel's governed draft endpoint with live/working revision preconditions (#166); a stray revision with no addressable working copy still fails with revision-surgery language (#201). Preflight does not un-orphan paragraphs already created — probe the host before creating dependents. A dryRun that returns without a refusal is not proof the write will succeed: field access and entity validation are checked only when Sentinel's draft endpoint ran, and the result's `checks` block says which checks ran."
+description: "Update an existing entity of any Drupal entity type. Only include attributes/relationships you want to change. Published moderated targets without an explicit attributes.moderation_state default to moderation_state 'draft' (forward revision). Paragraph / ERR identifiers are resolved to include meta.target_revision_id before PATCH; the write fails if any ref cannot be resolved. On moderated targets a non-saving PATCH preflight runs first (including dryRun) against the same URL the write will hit. An addressable node draft uses Sentinel's governed draft endpoint with live/working revision preconditions (#166); a stray revision with no addressable working copy still fails with revision-surgery language (#201). Preflight does not un-orphan paragraphs already created — probe the host before creating dependents. A dryRun that returns without a refusal is not proof the write will succeed: field access and entity validation are checked only when Sentinel's draft endpoint ran, and the result's `checks` block says which checks ran. When the draft inventory advertises open_draft, a published moderated paragraphs_library_item or block_content opens and continues through /mcp-draft with If-Match live or live:working, no mcp_components, and a re-read of the published pins. A continuation compares the forward revision with the pre-write working pins. When open_draft is not advertised, a published moderated paragraphs_library_item or block_content with no forward revision is saved by that canonical draft PATCH, then the published revision, rel:working-copy, and paragraph pins (including order) are re-read. The result fails if the published revision changed or no forward revision appeared. An existing forward draft, a missing revision id, or a denied version read is refused before any write. An unmoderated item keeps the ordinary update. A completed 4xx is returned when that re-read matches the pre-write revision and pins; a lost response stays uncertain (#420)."
 argument-hint: "<entityType> <bundle> <id> [site] [langcode] [attributes] [relationships] [dryRun] [returning]"
 ---
 
 Call the MCP tool `drupal_entity_update`.
 
-Update an existing entity of any Drupal entity type. Only include attributes/relationships you want to change. Published moderated targets without an explicit attributes.moderation_state default to moderation_state 'draft' (forward revision). Paragraph / ERR identifiers are resolved to include meta.target_revision_id before PATCH; the write fails if any ref cannot be resolved. On moderated targets a non-saving PATCH preflight runs first (including dryRun) against the same URL the write will hit. An addressable node draft uses Sentinel's governed draft endpoint with live/working revision preconditions (#166); a stray revision with no addressable working copy still fails with revision-surgery language (#201). Preflight does not un-orphan paragraphs already created — probe the host before creating dependents. A dryRun that returns without a refusal is not proof the write will succeed: field access and entity validation are checked only when Sentinel's draft endpoint ran, and the result's `checks` block says which checks ran.
+Update an existing entity of any Drupal entity type. Only include attributes/relationships you want to change. Published moderated targets without an explicit attributes.moderation_state default to moderation_state 'draft' (forward revision). Paragraph / ERR identifiers are resolved to include meta.target_revision_id before PATCH; the write fails if any ref cannot be resolved. On moderated targets a non-saving PATCH preflight runs first (including dryRun) against the same URL the write will hit. An addressable node draft uses Sentinel's governed draft endpoint with live/working revision preconditions (#166); a stray revision with no addressable working copy still fails with revision-surgery language (#201). Preflight does not un-orphan paragraphs already created — probe the host before creating dependents. A dryRun that returns without a refusal is not proof the write will succeed: field access and entity validation are checked only when Sentinel's draft endpoint ran, and the result's `checks` block says which checks ran. When the draft inventory advertises open_draft, a published moderated paragraphs_library_item or block_content opens and continues through /mcp-draft with If-Match live or live:working, no mcp_components, and a re-read of the published pins. A continuation compares the forward revision with the pre-write working pins. When open_draft is not advertised, a published moderated paragraphs_library_item or block_content with no forward revision is saved by that canonical draft PATCH, then the published revision, rel:working-copy, and paragraph pins (including order) are re-read. The result fails if the published revision changed or no forward revision appeared. An existing forward draft, a missing revision id, or a denied version read is refused before any write. An unmoderated item keeps the ordinary update. A completed 4xx is returned when that re-read matches the pre-write revision and pins; a lost response stays uncertain (#420).
 
 Parse the arguments supplied with this command into this tool's parameters:
 
@@ -19,7 +19,7 @@ Parse the arguments supplied with this command into this tool's parameters:
 - `langcode` (string): Target language for an unpublished working translation (nodes). Continues that translation via Sentinel.
 - `attributes` (object (pass as JSON))
 - `relationships` (object (pass as JSON))
-- `dryRun` (boolean (true/false)): Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. Only an existing node draft (or a langcode translation draft) is checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; field access and entity validation are NOT checked (`core_patch_guard`), so the real write can still fail with a field-access 403 or a 422. Unmoderated targets get no server-side check at all (`none`). A changed/revision_timestamp gap on the default revision (possiblyPatchBlocked) is a warning on list_revisions, not a local dryRun refusal — the write proceeds to the core probe / Sentinel (#405). An actual Sentinel stale-copy refusal is still rewritten. Any refusal fails the dryRun.
+- `dryRun` (boolean (true/false)): Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. An existing node draft (or a langcode translation draft), and a paragraphs_library_item or block_content whose inventory advertises open_draft, are checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; field access and entity validation are NOT checked (`core_patch_guard`), so the real write can still fail with a field-access 403 or a 422. Unmoderated targets get no server-side check at all (`none`). A changed/revision_timestamp gap on the default revision (possiblyPatchBlocked) is a warning on list_revisions, not a local dryRun refusal — the write proceeds to the core probe / Sentinel (#405). An actual Sentinel stale-copy refusal is still rewritten. Any refusal fails the dryRun.
 - `returning` (one of: full, minimal): Response verbosity. "full" (default) returns the complete saved entity; "minimal" returns just identity + state (id, type, bundle, title, status, changed, url) — much smaller, recommended for bulk writes where the echoed body would dominate the response.
 
 If a required parameter is missing, ask before calling — do not invent values. Coerce each value to its JSON type (booleans → true/false, numbers → numeric, object/array → parse JSON), then make the single tool call and summarize the result.

package/.agents/commands/drupal-update-node.md

@@ -24,7 +24,7 @@ Parse the arguments supplied with this command into this tool's parameters:
 - `langcode` (string): Target language for an unpublished working translation (e.g. 'es'). Continues that translation via Sentinel; does not create a missing translation and does not PATCH canonical langcode.
 - `fields` (object (pass as JSON)): Scalar/attribute field values keyed by machine name. Formatted text: a string or { value, format?, summary? }. format must be in the field's allowed_formats; a single allowed format is used when omitted. Entity-reference fields go in `relationships`, not here.
 - `relationships` (object (pass as JSON)): Entity-reference fields as JSON:API relationships, keyed by field machine name. Single-value uses { data: { type, id } }; multi-value uses { data: [{ type, id }, …] }. Paragraph / ERR items must carry meta.target_revision_id — the connector injects it when missing, and fails the write if it cannot. Image alt on a translation uses the existing file UUID plus meta.alt; replacing the file is refused.
-- `components` (array (pass as JSON)): Field changes for paragraphs this node already references directly (hero, text blocks, CTA banners), saved in the same unpublished draft revision as the node fields. Each entry is { id: paragraph UUID, type: paragraph bundle such as 'p_hero', attributes: { field: value } }. Each changed paragraph gets a new revision that only the draft points at; the live page does not change until the draft is published. Opens the working copy from live when none exists. Default language only. Attribute values only: references (for example a media field) are refused, as are nested paragraphs and paragraphs the node does not reference. Requires MCP Sentinel 2.29.0 or later; older hosts are refused before any write, with no direct paragraph write. A `path` change is refused on this path. The connector's paragraph write policy applies to each component. After the write each component is read back at its working revision and the submitted values compared; a value that did not land is an error. The result carries `_components` (each component's live and working pins and the fields verified), which survives `returning: 'minimal'`.
+- `components` (array (pass as JSON)): Field changes for paragraphs this node already references directly (hero, text blocks, CTA banners), saved in the same unpublished draft revision as the node fields. Each entry is { id: paragraph UUID, type: paragraph bundle such as 'p_hero', attributes: { field: value } }. Each changed paragraph gets a new revision that only the draft points at; the live page does not change until the draft is published. Opens the working copy from live when none exists. Default language only. Attribute values only: references (for example a media field) are refused, as are paragraphs the node does not reference. A nested paragraph is refused before any write; use drupal_draft_nested_components. Requires MCP Sentinel 2.29.0 or later; older hosts are refused before any write, with no direct paragraph write. A `path` change is refused on this path. The connector's paragraph write policy applies to each component. After the write each component is read back at its working revision and the submitted values compared; a value that did not land is an error. The result carries `_components` (each component's live and working pins and the fields verified), which survives `returning: 'minimal'`.
 - `dryRun` (boolean (true/false)): Validate, resolve ERR identifiers, run the server-side preflight when one applies, and return a preview without the real write. The result's `checks` block says what was checked; `caveat` names what was not. Only an existing node draft (or a langcode translation draft) is checked with the real payload: Sentinel's non-saving draft endpoint applies the submitted fields through field access and validates the entity (`serverPreflight: sentinel_draft`). On other moderated targets an id-mismatch core PATCH with no fields checks entity update access and core's working-copy guard only; Drupal does not check field access or entity validation on that probe (`core_patch_guard`). Text format is resolved before the preview returns, including on that path: a known allowed_formats list is enforced, and an unknown list reuses the format stored on the field. Other fields can still fail the real write with a field-access 403 or a validation 422. Unmoderated targets get no server-side check at all (`none`). A changed/revision_timestamp gap on the default revision (possiblyPatchBlocked) is a warning on list_revisions, not a local dryRun refusal — the write proceeds to the core probe / Sentinel (#405). An actual Sentinel stale-copy refusal is still rewritten. Any refusal fails the dryRun.
 - `returning` (one of: full, minimal): Response verbosity. "full" (default) returns the complete saved entity; "minimal" returns just identity + state (id, type, bundle, title, status, changed, url) — much smaller, recommended for bulk writes where the echoed body would dominate the response.
 

package/CHANGELOG.md

@@ -7,6 +7,92 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.2.1] - 2026-10-07
+
+### Fixed
+- **Text formats from Sentinel context (#429).** Node writes read
+  `allowed_formats` from `GET /drupal-mcp/context` when JSON:API field
+  config is not readable. A present list is enforced, including a
+  one-element `{ value, format }` array. A missing key stays an unknown
+  list, so an older Sentinel still passes an explicit format through.
+  Entity, translation, bulk, paragraph, and media writes use the same
+  check and do not invent `full_html` for a string body. A JSON:API row
+  whose field name does not match the request is ignored. A context miss
+  is remembered for 30 seconds, and only tools that resolve text formats
+  wait on that document. Component drafts and nested paragraph children,
+  including their translations, are checked before preflight or create.
+  An update that sends a one-element text array without a format reuses
+  the stored format. Hosts stay on the previous behavior until Sentinel
+  2.32.0, which emits the key, is deployed.
+
+### Added
+- **Consumers pin a version and check advisories before upgrade (#423).**
+  The README tells operators to pin an exact version, confirm the registry
+  integrity checksum, read the changelog, and run `npm audit --omit=dev`
+  before upgrading. No separate scanner. The install and `npx` examples,
+  and the post-upgrade doctor command, name that same version.
+
+## [3.2.0] - 2026-10-05
+
+### Added
+- **`drupal_draft_nested_components` (#421).** Replaces a nested paragraph
+  by creating new unpublished paragraphs and pinning a new direct parent
+  from the host's unpublished draft. The published host and the paragraphs
+  it already pins are not edited. `children` is the full new list (`keep`,
+  `replace`, `insert`; omit a child to leave it off the draft only). The
+  first host draft requires MCP Sentinel 2.29.0 (`open_draft`); an existing
+  working copy continues through `/mcp-draft`. There is no `mcp_components`
+  payload and no direct paragraph write. `dryRun` creates nothing and does
+  not evaluate the host payload. A host write that fails after preparation
+  reports the new paragraph UUIDs. When a parent was prepared, recovery is
+  `resumeParentId` with the same child list; that retry checks the prepared
+  paragraph's fields, other references, and child revision pins before any
+  host write. A failure before a parent exists says to delete the prepared
+  paragraphs. New paragraphs are created in the host's default language, and
+  the new parent keeps the published parent's other references. A lost
+  response stays uncertain until a re-read proves the prepared revision is
+  pinned. Reusable library items are refused; update those with
+  `drupal_entity_update`.
+
+### Changed
+- **Advertised library and custom-block drafts (#420, #422).** When the host
+  inventory lists `open_draft`, `drupal_entity_update` opens and continues a
+  published moderated `paragraphs_library_item` or `block_content` through
+  `/mcp-draft`. The body has no `mcp_components`. `If-Match` is the live
+  revision, or `live:working` when a forward draft already exists. The
+  published revision and its paragraph pins are re-read. A continuation
+  compares the forward revision with the pre-write working pins unless
+  relationships were submitted. When `open_draft` is not advertised, the
+  canonical draft PATCH remains, and an existing forward draft is still
+  refused before any write.
+- **Advertised nested replacement (#421, #422).** When the host inventory
+  lists `nested_replacement`, `drupal_draft_nested_components` sends one
+  `/mcp-draft` with `meta.mcp_nested_replacement`. `parentId` is sent as
+  `parent`. The connector creates no paragraphs and does not also send the
+  host paragraph field. `dryRun` uses that non-saving preflight. Hosts that
+  do not advertise the operation keep the client sequence, including
+  `resumeParentId`.
+
+### Fixed
+- **Reusable library and custom-block revision identity (#420).**
+  `drupal_internal__revision_id` is kept for `paragraphs_library_item` and
+  `block_content`. A published item with no forward revision is updated by a
+  canonical draft (`moderation_state: draft` or `review`); the connector then
+  re-reads the published revision, `rel:working-copy`, and the published
+  paragraph pins, including their order. Success requires a new working
+  revision and an unchanged published revision. `rel:latest-version` is the
+  latest default revision, so a difference there fails closed instead of
+  being treated as the draft. An existing forward draft is refused before
+  any write, because these types have no governed continuation endpoint. A
+  missing revision id, a denied version read, or a lost response fails
+  closed. A lost response is described from a follow-up re-read and is not
+  called a rollback. A completed 4xx is returned when that re-read matches
+  the published revision and pins; the same 4xx stays uncertain when the
+  re-read shows a change or cannot be finished. Drupal's working-copy "No
+  pending revision" response is treated as no draft only when its status is
+  403. An unmoderated library item or custom block keeps the ordinary update
+  and is not required to answer the version aliases.
+
 ## [3.1.0] - 2026-10-03
 
 ### Added

package/README.md

@@ -278,8 +278,8 @@ the allowlist or Sentinel profile excludes the type — run `doctor` and
 ### From npm (recommended for operators)
 
 ```bash
-npm install -g drupal-mcp-connector
-# or: npx -y drupal-mcp-connector
+npm install -g drupal-mcp-connector@3.2.1
+# or: npx -y drupal-mcp-connector@3.2.1
 ```
 
 Point your MCP client at the installed binary (path from `which drupal-mcp-connector`
@@ -287,6 +287,25 @@ or `node_modules/.bin/drupal-mcp-connector`). For multi-site or non-env config,
 clone the repo (or copy `config/config.example.json` beside a small launcher) and
 pass a config path — see **[docs/getting-started.md](docs/getting-started.md)**.
 
+### Before you upgrade
+
+Pin the version you run. Do not point a client you depend on at `latest` or an
+unbounded range.
+
+1. Pin an exact version in the lockfile (`package-lock.json` or
+   `npm-shrinkwrap.json`), or in `package.json` as
+   `"drupal-mcp-connector": "3.2.1"` (use the version you intend to run).
+2. Confirm the registry checksum before you install.
+   `npm view drupal-mcp-connector@3.2.1 dist.integrity` prints the integrity
+   npm checks. A lockfile install fails when the tarball does not match.
+3. Read [CHANGELOG.md](CHANGELOG.md) for that version.
+4. Run `npm audit --omit=dev` against the lockfile and read any advisory
+   before you upgrade. There is no separate scanner to install.
+
+Restart the MCP client after the upgrade. Run `drupal-mcp-doctor` when the
+package is on your PATH, or `npx -y drupal-mcp-connector@3.2.1 doctor` when
+you launch it with npx.
+
 ### From a git clone (development)
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drupal-mcp-connector",
-  "version": "3.1.0",
+  "version": "3.2.1",
   "description": "Multi-site MCP server for Drupal over JSON:API and GraphQL, with governed writes and an SSH Drush bridge. init writes a stdio or Tailscale client config from a transport preset. doctor checks reachability, auth, and readiness, and reports version skew. A timestamp gap on a published revision no longer blocks the next draft.",
   "type": "module",
   "main": "src/index.js",
@@ -72,7 +72,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/node": "^2.0.0",
-    "@modelcontextprotocol/server": "^2.0.0",
+    "@modelcontextprotocol/server": "^2.2.0",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
     "graphql": "^17.0.0",
@@ -81,12 +81,12 @@
     "ssh2": "^1.16.0"
   },
   "devDependencies": {
-    "@modelcontextprotocol/client": "^2.0.0",
+    "@modelcontextprotocol/client": "^2.2.0",
     "eslint": "^10.4.1",
-    "eslint-plugin-n": "^18.1.0",
-    "eslint-plugin-security": "^4.0.0",
-    "globals": "^17.6.0",
-    "vitest": "^5.0.0"
+    "eslint-plugin-n": "^18.4.0",
+    "eslint-plugin-security": "^4.2.0",
+    "globals": "^17.13.0",
+    "vitest": "^5.0.3"
   },
   "overrides": {
     "@hono/node-server": "^2.0.5",

package/src/index.js

@@ -50,6 +50,7 @@ import { createLegacySessionHandler, createMcpRequestHandler } from "./lib/http-
 import { createConnectorServerFactory } from "./lib/mcp-server.js";
 import { createRateLimiter } from "./lib/rate-limit.js";
 import { callTool, invokeReadTool, listResolvableSiteConfigs } from "./lib/dispatch.js";
+import { fetchTextFormatContext, installTextFormatContextFetcher } from "./lib/text-format-context.js";
 import { filterDiscoverableTools } from "./lib/governance.js";
 import {
   filterPromptsByPrincipal,
@@ -75,6 +76,8 @@ import { builtinWorkflowProvider } from "./lib/workflows/builtin.js";
 import { runWizardCli } from "./lib/wizard.js";
 import { runDoctorCli } from "./lib/doctor.js";
 
+installTextFormatContextFetcher(fetchTextFormatContext);
+
 const cliCommand = process.argv[2];
 if (cliCommand === "wizard" || cliCommand === "init") {
   process.exit(await runWizardCli(process.argv.slice(3)));

package/src/lib/backends/jsonapi.js

@@ -349,12 +349,15 @@ export class JsonApiBackend extends Backend {
           // Node reads expose the numeric nid advertised by schema discovery
           // while the UUID remains the canonical top-level id (#237).
           // Paragraph ERR attach needs the current revision id (#192).
+          // Library items and custom blocks use revision_id, not vid (#420).
           // Node / revisionable writes need the working vs live vid (#166).
           // Menu-link admin edit URLs need the numeric id (#398).
           // Other drupal_internal__* attributes stay stripped.
           return (entityType === "node" && k === "drupal_internal__nid")
             || k === "drupal_internal__vid"
-            || (entityType === "paragraph" && k === "drupal_internal__revision_id")
+            || ((entityType === "paragraph"
+              || entityType === "paragraphs_library_item"
+              || entityType === "block_content") && k === "drupal_internal__revision_id")
             || (entityType === "menu_link_content" && k === "drupal_internal__id");
         }
         return true;
@@ -594,18 +597,28 @@ export class JsonApiBackend extends Backend {
   /**
    * Create an entity via JSON:API POST. Retries without `status` on moderated
    * bundles — see writeWithModerationFallback.
-   * @param {{entityType: string, bundle: string, attributes?: object, relationships?: object}} input
+   * @param {{entityType: string, bundle: string, attributes?: object, relationships?: object, langcode?: string}} input
+   *   `langcode` creates the entity in that language (URL prefix, then language headers).
    * @returns {Promise<import("../canonical.js").CanonicalEntity>} The created entity.
    */
-  async createEntity({ entityType, bundle, attributes = {}, relationships }) {
+  async createEntity({ entityType, bundle, attributes = {}, relationships, langcode }) {
     const buildPayload = (attrs) => {
       const payload = { data: { type: `${entityType}--${bundle}`, attributes: attrs } };
       const rels = grantActorUid(entityType, relationships);
       if (rels) payload.data.relationships = rels;
       return payload;
     };
-    const data = await this.writeWithModerationFallback(this.resourcePath(entityType, bundle), "POST", buildPayload, attributes);
-    return this.toCanonical(data.data);
+    const data = await this.writeWithModerationFallback(
+      this.resourcePath(entityType, bundle), "POST", buildPayload, attributes, langcode,
+    );
+    const entity = this.toCanonical(data.data);
+    try {
+      assertServedLanguage(entity, langcode);
+    } catch (err) {
+      if (err && typeof err === "object") err.entity = entity;
+      throw err;
+    }
+    return entity;
   }
 
   /**
@@ -871,7 +884,10 @@ export class JsonApiBackend extends Backend {
       try {
         const data = await drupalFetch(this.site, `/jsonapi/${resource}/${resource}?${params}`);
         const row = Array.isArray(data?.data) ? data.data[0] : data?.data;
-        return parseFieldConfigObject(row?.attributes, fieldName);
+        // A filter that is ignored would return some other field. Using that
+        // row's allowed_formats would persist the wrong format (#429).
+        if (row?.attributes?.field_name !== fieldName) return null;
+        return parseFieldConfigObject(row.attributes, fieldName);
       } catch {
         return null;
       }