Problem

GraphQL Compose Codegen owns schema inspection, artifact comparison and generation services, but MCP clients currently need connector-specific Drush wrappers to use them. Module-owned typed actions would let clients discover these capabilities through the Tool API bridge.

Proposed resolution

Add an optional integration submodule providing typed inspection, snapshot comparison and generation-preview actions around the existing services. Keep the base module usable without the integration. Require explicit access and governed source checks on discovery and direct execution. Bound bundle selectors, schema reads and returned artifact sizes. Preview actions must never write files, change the stored comparison baseline, or accept arbitrary output paths. Reuse the same artifact pipeline as the existing commands.

Acceptance

Tests cover authorized reads, anonymous and wrong-scope refusal, malformed and oversized selectors, disabled integration, consistent artifact output, and unchanged files/snapshots. Document plugin identifiers, inputs, outputs and required permissions/scopes. Keep the currently supported Drupal versions covered by CI. Existing Drush commands remain available.

Comments

jmcerda created an issue. See original summary.

jmcerda’s picture

jmcerda
Location Boca Raton, FL
commented
Status: Active » Fixed

Implemented and published in Codegen 1.3.0. The optional submodule owns inspection, diff and read-only preview actions and requires Sentinel 2.22.0. Existing Drush commands are preserved. Source-policy discovery, direct-call authorization, bounded schema generation and safe error responses are covered by tests. Supported-core CI passed on Drupal 10.6/PHP 8.3, Drupal 11.3/PHP 8.3 and current Drupal 11/PHP 8.4; coding standards, dependency audit and CodeQL also passed.

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.