sbuilder-mcp 0.16.0 → 0.16.1

package/CHANGELOG.md

@@ -6,6 +6,12 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.16.1] - 2026-09-10
+
+### Fixed
+- sb_add, sb_set, sb_move, sb_remove, sb_duplicate, sb_event and sb_bind now judge a write against a throwaway copy of the page before applying it, so a save the platform refuses is never applied to the draft or broadcast to a live session; previously the refused node stayed in the document and every later command was validated against a tree the caller never asked for, repeating the same complaint about an id it had never typed. A write is still refused only for problems it introduces, not for damage the page already had when the session opened it.
+- sb_import_page now builds its whole run of sections on a copy and commits them in one save, so a refusal partway through no longer leaves a page half imported with no way to tell which sections landed.
+
 ## [0.16.0] - 2026-09-10
 
 ### Added

package/CHANGELOG.vi.md

@@ -6,6 +6,12 @@ Mọi thay đổi đáng chú ý của dự án được ghi lại trong file n
 Định dạng dựa trên [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 và dự án tuân theo [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.16.1] - 2026-09-10
+
+### Fixed
+- sb_add, sb_set, sb_move, sb_remove, sb_duplicate, sb_event và sb_bind giờ đánh giá một lần ghi trên một bản sao tạm của trang trước khi áp dụng thật, để một lần save bị nền tảng từ chối không bao giờ được áp vào draft hay phát ra cho một phiên live đang xem; trước đây node bị từ chối vẫn ở lại trong document và mọi lệnh sau đó đều bị kiểm tra dựa trên một tree mà người gọi chưa từng yêu cầu, lặp lại cùng một lời phàn nàn về một id mà họ chưa từng gõ. Một lần ghi vẫn chỉ bị từ chối vì vấn đề do chính nó gây ra, không phải vì hư hỏng trang đã có sẵn từ trước khi phiên làm việc mở nó.
+- sb_import_page giờ dựng toàn bộ các section trong một lượt import trên một bản sao và commit chúng trong một lần save duy nhất, để một lần từ chối giữa chừng không còn để lại một trang import dở dang mà không cách nào biết những section nào đã vào được.
+
 ## [0.16.0] - 2026-09-10
 
 ### Added

package/dist/domains/site/document.js

@@ -130,6 +130,29 @@ export class PageDoc {
         applyPatches(this.doc, patches);
         this.revision += 1;
     }
+    /**
+     * What this document WOULD be with these patches applied — a throwaway copy,
+     * so the real one is untouched.
+     *
+     * It exists so a write can be judged before it is made. Applying first and
+     * validating after leaves a refused edit sitting in the draft: the platform
+     * declines the save, the node stays, and every later command is then judged
+     * against a tree the caller never asked for and cannot see. Driving the real
+     * server, that arrived as three `sb_add` calls in a row all answering with the
+     * same complaint about a node id the caller had never typed.
+     *
+     * A JSON round-trip rather than anything cleverer. A page is hundreds of KB,
+     * which is a millisecond, and it is paid only on a write that is actually
+     * being committed — never on a dry run, never on a read.
+     */
+    preview(patches) {
+        const copy = new PageDoc(JSON.parse(JSON.stringify(this.doc)), this.revision);
+        // Carried, not re-derived: a validator that saw a different root key on the
+        // copy than on the original would be judging a different page.
+        copy.adoptedRootKey = this.adoptedRootKey;
+        copy.apply(patches);
+        return copy;
+    }
     /**
      * A compressed tree — id, type, name, child count, and the flags that change
      * what a caller may safely do with a node.

package/dist/tools/importpage.js

@@ -121,13 +121,24 @@ export function registerImportTools(server, ctx, session) {
                 `Skipped: ${JSON.stringify(shot.skipped)}. A page that builds itself with scripts ` +
                 'after load, or one behind a login, reads as empty here.');
         }
+        // STAGED ON A COPY, committed once.
+        //
+        // Each section's patch set is computed from the tree the previous one
+        // left, so they have to be applied in order — but applying them to the
+        // REAL document means a refusal at the end leaves the page half imported,
+        // with no way for the caller to tell which half. Building on a throwaway
+        // and committing the whole run through `applyAndSave` keeps the import
+        // all-or-nothing, and keeps it to one save and one live frame.
         const added = [];
+        const all = [];
+        const staged = doc.preview([]);
         for (const spec of specs) {
-            const { patches, ids } = addSubtree(doc, doc.doc.root_node_id, spec);
-            session.applyAndPublish(patches);
+            const { patches, ids } = addSubtree(staged, staged.doc.root_node_id, spec);
+            staged.apply(patches);
+            all.push(...patches);
             added.push(ids[0]);
         }
-        await session.save();
+        await session.applyAndSave(all);
         return text({
             read: shot.url,
             added_sections: added,

package/dist/tools/live.js

@@ -452,8 +452,7 @@ export function registerLiveTools(server, ctx, session) {
         const patches = setEvent(d, id, trigger ?? 'click', action, payload);
         if (dry_run !== false)
             return text({ dry_run: true, patches });
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         return text({ node: id, trigger: trigger ?? 'click', action, rev: d.rev });
     });
     server.registerTool('sb_bind', {
@@ -481,8 +480,7 @@ export function registerLiveTools(server, ctx, session) {
         const patches = bindNode(d, id, source, field, action);
         if (dry_run !== false)
             return text({ dry_run: true, patches });
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         return text({ bound: id, source, field, ...(action ? { action } : {}), rev: d.rev });
     });
 }

package/dist/tools/page.js

@@ -101,6 +101,36 @@ export class PageSession {
             this.live.cursor(box.x + box.w / 2, box.y + box.h / 2);
         }
     }
+    /**
+     * The only sanctioned way to write: judge, then apply, publish and save.
+     *
+     * SPLITTING THESE WAS THE BUG. Every tool used to call `applyAndPublish` and
+     * then `save()`, and a save the platform would refuse threw with the patches
+     * already in the draft — and already broadcast to anyone watching the page
+     * live. The refused node then sat there, so the NEXT command was validated
+     * against a tree the caller had never asked for and got the same complaint
+     * about an id they had never typed. Three `sb_add` calls in a row, three
+     * identical refusals, and three copies of the element quietly in the page.
+     *
+     * The check runs on a COPY (`PageDoc.preview`), so a write that cannot be
+     * stored is never applied at all — no rollback to get wrong, and no phantom
+     * frame for a peer in the room to have to un-see.
+     *
+     * IT REFUSES ONLY WHAT THIS WRITE INTRODUCES. A page that arrived broken —
+     * damage stored before this session opened it — must not become a page nobody
+     * can edit, because the edit that repairs it is also a write. Pre-existing
+     * problems are left to `save()`, which names them.
+     */
+    async applyAndSave(patches) {
+        const d = this.current();
+        const before = new Set(validateForSave(d));
+        const introduced = validateForSave(d.preview(patches)).filter((p) => !before.has(p));
+        if (introduced.length > 0) {
+            throw new Error(`sbuilder: refusing to save — ${introduced.join(' ')}`);
+        }
+        this.applyAndPublish(patches);
+        await this.save();
+    }
     applyRemote(patches) {
         this.doc?.apply(patches);
     }
@@ -287,8 +317,7 @@ export function registerPageTools(server, ctx) {
                 ...(inert ? { inert } : {}),
             });
         }
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         return text({ added: ids, rev: d.rev, ...(inert ? { inert } : {}) });
     });
     server.registerTool('sb_set', {
@@ -504,8 +533,7 @@ export function registerPageTools(server, ctx) {
             });
         }
         const warnings = stuck();
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         for (const t of touched) {
             const w = globalWarning(d.doc, t.id);
             if (w)
@@ -551,8 +579,7 @@ export function registerPageTools(server, ctx) {
         const patches = moveNode(d, id, parent_id, index);
         if (dry_run !== false)
             return text({ dry_run: true, patches });
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         return text({ moved: id, rev: d.rev });
     });
     server.registerTool('sb_remove', {
@@ -564,8 +591,7 @@ export function registerPageTools(server, ctx) {
         const patches = removeNode(d, id);
         if (dry_run !== false)
             return text({ dry_run: true, removing: patches.length });
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         return text({ removed: id, rev: d.rev });
     });
     server.registerTool('sb_review', {
@@ -608,8 +634,7 @@ export function registerPageTools(server, ctx) {
         const { patches, ids } = duplicateNode(d, id);
         if (dry_run !== false)
             return text({ dry_run: true, would_copy: ids.length });
-        session.applyAndPublish(patches);
-        await session.save();
+        await session.applyAndSave(patches);
         return text({ duplicated: id, into: ids[0], nodes: ids.length, rev: d.rev });
     });
     server.registerTool('sb_templates', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sbuilder-mcp",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "MCP server that designs and operates a Store Builder site — pages, data, theme and publish — through the platform's own API and live-edit protocol.",
   "mcpName": "io.github.vuluu2k/sbuilder-mcp",
   "type": "module",