chore: release v0.7.5 — docs update, BUG-041/A/024/B fixes

Author: Dev Agent Amelia

.github/java-upgrade/hooks/scripts/recordToolUse.ps1

@@ -0,0 +1,17 @@
+# Records run_in_terminal and appmod-* tool calls as JSONL for the extension to process.
+
+$raw = [Console]::In.ReadToEnd()
+
+if ($raw -notmatch '"tool_name"\s*:\s*"([^"]+)"') { exit 0 }
+$toolName = $Matches[1]
+
+if ($toolName -ne 'run_in_terminal' -and $toolName -notlike 'appmod-*') { exit 0 }
+
+if ($raw -notmatch '"session_id"\s*:\s*"([^"]+)"') { exit 0 }
+$sessionId = $Matches[1]
+
+$hooksDir = '.github\java-upgrade\hooks'
+if (-not (Test-Path $hooksDir)) { New-Item -ItemType Directory -Path $hooksDir -Force | Out-Null }
+
+$line = ($raw -replace '[\r\n]+', ' ').Trim() + "`n"
+[System.IO.File]::AppendAllText("$hooksDir\$sessionId.json", $line, [System.Text.UTF8Encoding]::new($false))

.github/java-upgrade/hooks/scripts/recordToolUse.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Records run_in_terminal and appmod-* tool calls as JSONL for the extension to process.
+
+INPUT=$(cat)
+
+TOOL_NAME="${INPUT#*\"tool_name\":\"}"
+TOOL_NAME="${TOOL_NAME%%\"*}"
+
+case "$TOOL_NAME" in
+  run_in_terminal|appmod-*) ;;
+  *) exit 0 ;;
+esac
+
+case "$INPUT" in
+  *'"session_id":"'*) ;;
+  *) exit 0 ;;
+esac
+
+SESSION_ID="${INPUT#*\"session_id\":\"}"
+SESSION_ID="${SESSION_ID%%\"*}"
+[ -z "$SESSION_ID" ] && exit 0
+
+HOOKS_DIR=".github/java-upgrade/hooks"
+mkdir -p "$HOOKS_DIR"
+
+LINE=$(printf '%s' "$INPUT" | tr -d '\r\n')
+printf '%s\n' "$LINE" >> "$HOOKS_DIR/${SESSION_ID}.json"

CAPABILITIES.md

@@ -1,16 +1,16 @@
 # MCP Dataverse Server — Complete Capabilities Reference
 
-> **Version**: 0.5.0 | **API Version**: Dataverse Web API v9.2 | **Transport**: stdio · HTTP/SSE
+> **Version**: 0.7.5 | **API Version**: Dataverse Web API v9.2 | **Transport**: stdio · HTTP/SSE
 
-73 tools across 25 categories for full Dataverse lifecycle: schema, CRUD, FetchXML, solutions, plugins, audit, files, users, teams, RBAC, attribute management, environment variables, workflows, and more.
+79 tools across 27 categories for full Dataverse lifecycle: schema, CRUD, FetchXML, solutions, plugins, audit, files, users, teams, RBAC, attribute management, environment variables, workflows, schema write, record access, and more.
 
 ---
 
 ## Table of Contents
 
 - [Quick Start](#quick-start)
 - [Architecture Overview](#architecture-overview)
-- [Tool Reference (73 tools)](#tool-reference-73-tools)
+- [Tool Reference (79 tools)](#tool-reference-79-tools)
   - [1. Auth (1)](#1-auth-1-tool)
   - [2. Metadata (9)](#2-metadata-9-tools)
   - [3. Query (3)](#3-query-3-tools)
@@ -36,6 +36,8 @@
   - [23. Workflows (4)](#23-workflows-4-tools)
   - [24. Assistance (2)](#24-assistance-2-tools)
   - [25. Attributes (4)](#25-attributes-4-tools)
+  - [26. Schema (write) (2)](#26-schema-write-2-tools)
+  - [27. Record Access (4)](#27-record-access-4-tools)
 - [Error Handling & Retry Behavior](#error-handling--retry-behavior)
 - [Security](#security)
 - [Limitations & Known Constraints](#limitations--known-constraints)
@@ -95,7 +97,7 @@ Server communicates over **stdio** (MCP SDK `StdioServerTransport`). Connect fro
 
 ```mermaid
 graph LR
-    MCP["MCP Dataverse Server<br/><i>73 tools · 25 categories</i>"]
+    MCP["MCP Dataverse Server<br/><i>79 tools · 27 categories</i>"]
 
     MCP --> AUTH["🔑 Auth (1)"]
     MCP --> META["📋 Metadata (9)"]
@@ -122,13 +124,15 @@ graph LR
     MCP --> WF["⚙️ Workflows (4)"]
     MCP --> ASSIST["🤖 Assistance (2)"]
     MCP --> ATTR["🏗️ Attributes (4)"]
+    MCP --> SCHEMA["📐 Schema write (2)"]
+    MCP --> ACCESS["🔐 Record Access (4)"]
 ```
 
 All tool handlers validate inputs with **Zod** before calling the `DataverseAdvancedClient`. Auth tokens are cached and refreshed proactively; transient errors (429, 503, 504) are retried with exponential backoff.
 
 ---
 
-## Tool Reference (73 tools)
+## Tool Reference (79 tools)
 
 ### 1. Auth (1 tool)
 

CHANGELOG.md

@@ -5,6 +5,61 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) — [Semantic V
 
 ---
 
+## [0.7.5] — 2026-04-14
+
+### Fixed
+
+- **BUG-041 — `dataverse_check_record_access` bound-function regression**: `RetrievePrincipalAccess` is a **bound** OData function on the principal entity (system user or team), not a standalone function. The previous implementation called it as an unbound function, causing runtime failures. Fixed: `executeBoundFunction(principalEntitySet, principalId, "RetrievePrincipalAccess", { Target })`. All 10 access-check tests now pass.
+- **BUG-A — `dataverse_merge_records` missing `@odata.type`**: The `updateContent` payload was missing the mandatory `@odata.type` annotation (`application/json;type=entry`), causing the Merge action to reject non-empty update bodies. `@odata.type` is now injected automatically before the OData POST.
+- **BUG-024 — `dataverse_create_relationship` lookup prefix**: The auto-generated lookup column name (`referencingEntity + "id"`) incorrectly reused the referencing entity schema name without deriving its publisher prefix. The prefix is now extracted directly from `referencingEntity` (first segment before `_`). Example: `account → new_testcr01` now correctly produces `new_accountid`.
+- **BUG-B — `dataverse_merge_records` custom entity error**: Merging custom entities returned an opaque OData stack trace. The tool now catches the unsupported-entity error and returns a clear, actionable message explaining that `Merge` is restricted to OOB entity types (Account, Contact, Lead, Incident).
+
+---
+
+## [0.7.0] — 2026-04-12
+
+### Added
+
+- **`dataverse_create_table`** — Create a new custom entity (table) in Dataverse by POSTing to `/EntityDefinitions`. Accepts schema name, display names, ownership type (`UserOwned` / `OrganizationOwned`), notes, activities, audit flags, and primary name column config. Returns the new `metadataId`.
+- **`dataverse_create_relationship`** — Create a One-to-Many or Many-to-Many relationship via `/RelationshipDefinitions`. Supports cascade delete configuration (1:N) and custom intersect entity names (N:N). Returns the new `metadataId`.
+- **`dataverse_check_record_access`** — Check which access rights a user or team holds on a specific record using the `RetrievePrincipalAccess` OData function. Returns parsed rights list (`ReadAccess`, `WriteAccess`, etc.).
+- **`dataverse_grant_access`** — Grant record-level sharing to a user or team via the `GrantAccess` Dataverse action. Supports all standard AccessMask rights.
+- **`dataverse_revoke_access`** — Revoke all shared access from a user or team via the `RevokeAccess` Dataverse action.
+- **`dataverse_merge_records`** — Merge two records of the same type via the `Merge` Dataverse action. The subordinate is deactivated and its data carried over to the target. Requires `confirm: true` to prevent accidental execution.
+
+### Internal
+
+- **`src/tools/schema.tools.ts`** — New module with `schemaTools` array and `handleSchemaTool` dispatcher.
+- **`src/tools/record-access.tools.ts`** — New module with `recordAccessTools` array and `handleRecordAccessTool` dispatcher.
+- **`src/dataverse/dataverse-client.metadata.ts`** — Added `createEntityDefinition(body)` method (POST `/EntityDefinitions`, extracts GUID from `OData-EntityId` response header).
+- **`src/tools/router.tools.ts`** — Added tags and descriptions for all 6 new tools.
+- **`tests/unit/schema-tools.test.ts`** and **`tests/unit/record-access-tools.test.ts`** — 25 new tests; total test suite: 691.
+
+### Stats
+
+- 79 tools (was 73) · 4 MCP resources · 5 MCP prompts · 27 categories
+
+---
+
+## [0.6.0] — 2026-04-12
+
+### Added
+
+- **MCP Prompts** — 5 pre-built workflow prompts exposed via the MCP `prompts/list` + `prompts/get` protocol endpoints. Clients that support MCP Prompts (Claude, Copilot) can invoke them as slash commands or one-click workflow starters:
+  - `analyze-org-health` — Complete org health check: identity, table inventory, security roles, workflow health, plugin steps, audit logging.
+  - `data-quality-check` — Data quality analysis for a table (required arg: `tableName`, optional: `sampleSize`): null rates, duplicates, stale records, referential integrity.
+  - `schema-review` — Expert schema review for a table (required arg: `tableName`): columns, naming conventions, relationships, alternate keys, views.
+  - `security-audit` — Security model audit: users, roles, over-privileged accounts, teams, business unit hierarchy.
+  - `analyze-workflow` — Workflow/flow analysis (optional args: `workflowName`, `statusFilter`): ownership, execution traces, plugin overlap, modernisation candidates.
+- **`prompts: {}` capability** — `server.ts` now advertises prompt support in the MCP server capabilities block.
+
+### Internal
+
+- **`src/prompts/prompt-provider.ts`** — Prompt catalogue (`PROMPTS` array) + `listPrompts()` / `getPrompt(name, args)` public API. Each builder function renders the step-by-step prompt text with the exact tool names the AI should call.
+- **`tests/unit/prompt-provider.test.ts`** — 28 unit tests covering: prompt count, argument definitions, error handling (unknown name, missing required arg), tool name references per prompt, and argument interpolation.
+
+---
+
 ## [0.5.0] — 2026-03-24
 
 ### Added

README.md

@@ -6,7 +6,7 @@
 
 **The most complete MCP server for Microsoft Dataverse.**
 
-73 tools · 4 resources · 10 guided workflows · Three auth modes
+79 tools · 4 resources · 10 guided workflows · Three auth modes
 
 [![npm](https://img.shields.io/npm/v/mcp-dataverse)](https://www.npmjs.com/package/mcp-dataverse)
 [![npm downloads](https://img.shields.io/npm/dm/mcp-dataverse)](https://www.npmjs.com/package/mcp-dataverse)
@@ -85,6 +85,8 @@ For client credentials and managed identity setup, see [Authentication docs](htt
 | **Annotations**         | 2     | Notes and file attachments                                            |
 | **Customization**       | 4     | Custom actions, plugins, env variables, connection references         |
 | **Attributes**          | 4     | Create, update, delete columns; lookup column type                    |
+| **Schema (write)**      | 2     | Create custom tables and relationships                                |
+| **Record Access**       | 4     | Check, grant, revoke record sharing; merge records                    |
 | **Assistance**          | 2     | Tool router, tool tags                                                |
 | **+ more**              | …     | Delta sync, impersonation, views, business units, duplicate detection |
 
@@ -142,7 +144,8 @@ MCP Dataverse is designed to be comprehensive, but most AI models work best with
 | -------- | ----------------------------------------------------------------- | ----------- |
 | **v0.4** | HTTP transport + attribute management + schema consistency        | ✅ Released |
 | **v0.5** | Enterprise auth (Client Credentials, Managed Identity, Entra JWT) | ✅ Released |
-| **v0.6** | MCP Prompts + ERD generator + API snippet generator               | 🔜 Planned  |
+| **v0.6** | MCP Prompts (5 templates) + MCP Resources (4)                     | ✅ Released |
+| **v0.7** | Schema write (create table/relationship) + Record Access (share, merge) | ✅ Released (v0.7.5) |
 
 [→ Full Roadmap](https://codeurali.github.io/mcp-dataverse/roadmap)