DESCRIBE emits over-qualified grant member names that fail to re-parse (roundtrip break)

[ako]

Summary

DESCRIBE on an entity emits member-level access grants with fully-qualified member names (Module.Entity.Member), but the MDL parser only accepts the bare member name (or read *). The emitted MDL therefore fails to re-parse, breaking the documented "DESCRIBE roundtrip" guarantee (CLAUDE.md: "DESCRIBE roundtrip — if the feature creates artifacts, describe should output re-executable MDL").

Reproduction

create module RT;
create persistent entity RT.E ( Name: string(50) );
grant RT.User on RT.E (read (RT.E.Name), write (RT.E.Name));   -- as emitted by DESCRIBE

$ mxcli check repro.mdl
  - line 3:31 mismatched input '.' expecting {',', ')'}
  - line 3:33 extraneous input '.' ...
  - line 3:38 extraneous input ')' ...

The accepted forms (bare member / wildcard) both pass:

grant RT.User on RT.E (read (Name), write (Name));   -- ✓ Syntax OK
grant RT.User on RT.E (read *);                       -- ✓ Syntax OK

Real-world trigger

describe entity OntologyViewer.GraphTraversalHelper (and most entities with member-level grants) emits:

grant OntologyViewer.User on OntologyViewer.GraphTraversalHelper
  (read (OntologyViewer.GraphTraversalHelper.DataJSON), write (OntologyViewer.GraphTraversalHelper.DataJSON));

describe module ... with all then fails to re-execute for every such entity.

Expected

Either (a) DESCRIBE should emit bare member names inside read(...)/write(...), or (b) the grammar should also accept fully-qualified member names. (a) is the lower-risk fix and matches the existing accepted syntax.

Environment

mxcli built from current main; reproduced via mxcli check (syntax only, no project needed).

[github-actions]

Issue Triage

Summary:
The DESCRIBE command outputs grant statements with fully‑qualified member names (Module.Entity.Member), which the MDL parser rejects, breaking the DESCRIBE round‑trip guarantee.

Checklist for bug report completeness

Required info	Present?	Details
mxcli version (output of mxcli --version or commit/build)	❌	Only says “built from current main”.
Mendix version of the project being processed	❌	Not mentioned.
Scenario (what the user was trying to do)	✅	Describing an entity with member‑level grants and expecting the output to be re‑executable.
Expected output (what should have happened)	✅	DESCRIBE should produce MDL that can be re‑parsed without errors.
Experienced output (what actually happened)	✅	Parser errors: mismatched input '.', extraneous input '.' and ')'.
AI bug report (output of mxcli diag --bundle or session log)	❌	Not provided.

What’s missing:

• Exact mxcli version (or commit hash/build identifier).
• Mendix version of the project you’re working with (if applicable).
• An AI bug report bundle (mxcli diag --bundle) or at least the relevant session log.

Could you please add those details? Once we have them, we’ll be able to investigate and fix the round‑trip issue. Thanks for reporting!

---

Automated triage via OpenRouter — workflow source

[ako]

Fixed in v0.12.0 (released 2026-06-04), commit 426a33c9. DESCRIBE now emits bare grant member names that re-parse cleanly.