@aborruso/ckan-mcp-server 0.4.112 → 0.4.113

package/LOG.md

@@ -1,47 +1,65 @@
 # LOG
 
+## 2026-07-31
+
+### v0.4.113
+
+JSON output always parseable (issue #39).
+
+The docs promised "always valid JSON"; the code did not deliver it. Surfaced while reviewing PR #38 (an AI contribution by `averyquinnhq`), which documented the real behaviour and contradicted issue #37 — the PR was right.
+
+- **Live repro**: `ckan_tag_list limit=1000` on dati.gov.it → 50,046 characters, `JSON.parse` fails. Not a corner case: an ordinary call.
+- **`truncateJson`**: the last-resort branch cut the serialized string (`truncateText(JSON.stringify(...))`, with an in-code comment admitting "may produce invalid JSON"). It now empties arrays progressively and, when that is not enough, degrades to a valid `{_truncated, _error}`. `SHRINKABLE_KEYS` extended (+`rows`, `datasets`, `portals`, `facets`, `fields`) with a sacrifice order: bulk rows first, `fields` last.
+- **8 tools + 4 Resources** used `truncateText(JSON.stringify(...))` directly: routed through `truncateJson`. `sparql_query` appended `/* output truncated */` to cut JSON (JSON has no comments): rewritten.
+- **4 tools with no cap at all**: `ckan_get_mqa_quality`, `ckan_get_mqa_quality_details` (bare JSON.stringify), `ckan_find_portals`, `ckan_status_show` (markdown).
+- **A third unparseable path**: no `catch` honoured `response_format` — every error came back as prose even with `json`. New `formatError()`; errors now return `{error, _error: true}` plus `isError: true`. Zod validation errors stay textual (emitted by the SDK before the handler runs).
+- **`structuredContent` stays uncapped** (65,382 characters against 50,000 of text on tag_list): capping it would drop rows from `datastore-table-ui`, which consumes it. Decision deferred, documented in `docs/DECISIONS.md`.
+- 10 new tests (`truncateJson` had none), 453 passing. E2e: `tag_list` from PARSE-FAIL to parse-ok; real errors parseable in json mode.
+- `CONTRIBUTING.md`: section on AI-assisted contributions (disclosure, small diffs, verifiable claims).
+- Review follow-up: `addDemoFooter()` was appended to JSON output in `quality.ts`, breaking parsing on Workers — now wraps the Markdown branch only, inside `truncateText`. Added `isError: true` to the two non-dati.gov.it guards. The `truncateJson` fallback now degrades further so it always respects small limits. 454 passing.
+
 ## 2026-07-09
 
 ### v0.4.112
 
-Security — Giro 3: hardening (chiude l'ultimo gruppo di advisory in triage).
+Security — Round 3: hardening (closes the last group of advisories in triage).
 
-- **Error reflection**: `makeCkanRequest` non incorpora più il body upstream (`JSON.stringify(decodedData)`) nell'errore verso il caller — ora messaggio generico action-scoped, dettaglio solo su stderr (troncato). `worker.ts` catch-all: rimosso `error.message` dal campo `data` JSON-RPC (log solo server-side). Chiude il canale di lettura semi-cieco della SSRF.
-- **postMessage UI** (`resources/datastore-table-ui.ts`): l'origin dell'host viene pinnato dalla risposta all'handshake `ui/initialize`; i messaggi con dati vengono accettati solo da quell'origin e gli outbound usano il target origin esplicito (mai `'*'`).
-- **Prompt-injection su org/group**: esteso il contenimento c499 ai renderer di `organization.ts` e `group.ts` — `description` in blocco untrusted (`wrapUntrusted`), newline collassati nelle liste.
-- 3 nuovi test (no-leak errore, fence description org/group); 443 passati. E2e: errore generico su 404 (nessun body interno), richieste normali ok. Worker build ok.
+- **Error reflection**: `makeCkanRequest` no longer embeds the upstream body (`JSON.stringify(decodedData)`) in the error returned to the caller — now a generic action-scoped message, with detail on stderr only (truncated). `worker.ts` catch-all: removed `error.message` from the JSON-RPC `data` field (server-side logging only). Closes the semi-blind read channel of the SSRF.
+- **postMessage UI** (`resources/datastore-table-ui.ts`): the host origin is pinned from the reply to the `ui/initialize` handshake; messages carrying data are accepted only from that origin, and outbound messages use an explicit target origin (never `'*'`).
+- **Prompt injection on org/group**: extended the c499 containment to the `organization.ts` and `group.ts` renderers — `description` in an untrusted block (`wrapUntrusted`), newlines collapsed in lists.
+- 3 new tests (error no-leak, org/group description fencing); 443 passing. E2e: generic error on 404 (no internal body), normal requests fine. Worker build fine.
 
 ### v0.4.111
 
-Security — Giro 2: tre bug distinti economici.
+Security — Round 2: three distinct low-cost bugs.
 
-- **MQA allowlist bypass** (`isValidMqaServer`, `tools/quality.ts`): regex non ancorata sostituita da URL-parse + confronto host esatto (`dati.gov.it`/`www.dati.gov.it`). Ora i trucchi suffix (`dati.gov.it.attacker.com`) e userinfo (`dati.gov.it@attacker.com`) sono rifiutati.
-- **Decompression bomb / unbounded buffering** (`utils/http.ts`): cap dimensione risposta (`maxContentLength`/`maxBodyLength` su axios + check byte su `arrayBuffer` nel branch fetch, def 32MB) e cap output decompressione (`maxOutputLength` su gunzip/brotli/inflateSync + check su DecompressionStream, def 64MB). Override via `CKAN_MAX_RESPONSE_BYTES`/`CKAN_MAX_DECOMPRESSED_BYTES`. Stop a OOM/stallo da payload iper-compressi.
-- **Cache-key collision** (`utils/cache.ts`): `canonicalizeParams` ora produce JSON canonico tipizzato (sort ricorsivo) invece di `k=v` join con `&` non-escapati; `buildCacheKey` incornicia in `JSON.stringify([url,action,canon])`. `{q:"budget",rows:10}` e `{q:"budget&rows=10"}` non collidono più.
-- 2 nuovi test (+regressioni aggiornate); 440 passati. E2e: MQA host valido raggiunge data.europa.eu, bypass rifiutato, richieste normali ok. Worker build ok.
-- Ulteriore hardening in lavorazione nei prossimi rilasci.
+- **MQA allowlist bypass** (`isValidMqaServer`, `tools/quality.ts`): unanchored regex replaced by URL parsing plus exact host comparison (`dati.gov.it`/`www.dati.gov.it`). Suffix (`dati.gov.it.attacker.com`) and userinfo (`dati.gov.it@attacker.com`) tricks are now rejected.
+- **Decompression bomb / unbounded buffering** (`utils/http.ts`): response size cap (`maxContentLength`/`maxBodyLength` on axios plus a byte check on `arrayBuffer` in the fetch branch, default 32MB) and decompression output cap (`maxOutputLength` on gunzip/brotli/inflateSync plus a check on DecompressionStream, default 64MB). Override via `CKAN_MAX_RESPONSE_BYTES`/`CKAN_MAX_DECOMPRESSED_BYTES`. Stops OOM/stalls from hyper-compressed payloads.
+- **Cache-key collision** (`utils/cache.ts`): `canonicalizeParams` now produces typed canonical JSON (recursive sort) instead of a `k=v` join with unescaped `&`; `buildCacheKey` frames it in `JSON.stringify([url,action,canon])`. `{q:"budget",rows:10}` and `{q:"budget&rows=10"}` no longer collide.
+- 2 new tests (plus updated regressions); 440 passing. E2e: valid MQA host reaches data.europa.eu, bypass rejected, normal requests fine. Worker build fine.
+- Further hardening in progress for upcoming releases.
 
 ### v0.4.110
 
-Security — Giro 1: cluster SSRF su path `fetch` (GHSA-vmrr, GHSA-38f8; GHSA-8hxx chiarito):
+Security — Round 1: SSRF cluster on the `fetch` path (GHSA-vmrr, GHSA-38f8; GHSA-8hxx clarified):
 
-- **`safeFetch()` centralizzato** in `utils/http.ts`: `redirect:"manual"` + ri-validazione di ogni hop (`validateServerUrl` + `assertHostnameResolvesSafe`), bounded hops, opzione `httpsOnly`. Chiude il redirect-SSRF (es. endpoint pubblico che fa 302 verso `169.254.169.254`) senza rompere i redirect canonici legittimi. Usato da `sparql_query` (3 fetch) e dal fetch MQA metrics in `quality.ts`.
-- **`assertHostnameResolvesSafe` ora fail-closed**: distingue "modulo DNS assente (Workers) → no-op" da "risoluzione fallita → throw". Prima un errore DNS lasciava proseguire (fail-open / TOCTOU).
-- **GHSA-8hxx**: verificato che WHATWG `URL` normalizza già gli encoding IPv4 (int/hex/ottale/short) a dotted-decimal prima di `validateServerUrl` → il check esistente li copre già. Nessun codice aggiunto (la PoC dell'advisory testava la regex sulle stringhe grezze, non sull'hostname parsato). Aggiunto solo un commento e test di regressione. Residuo `::7f00:1` (IPv4-compatible IPv6) non instradabile, come ammesso dall'advisory stesso.
-- MQA fetch: host costante (`data.europa.eu`), quindi hardening per coerenza, non vettore reale.
-- 6 nuovi test (redirect→interno bloccato, redirect→non-HTTPS rifiutato, fail-closed su DNS error, IPv4-encoding bloccati). 438 passati. E2e: Wikidata via `safeFetch` ok, IP interno bloccato. Worker build ok.
-- Ulteriore hardening di sicurezza in lavorazione nei prossimi rilasci.
+- **Centralized `safeFetch()`** in `utils/http.ts`: `redirect:"manual"` plus re-validation of every hop (`validateServerUrl` + `assertHostnameResolvesSafe`), bounded hops, `httpsOnly` option. Closes redirect-SSRF (e.g. a public endpoint 302-ing to `169.254.169.254`) without breaking legitimate canonical redirects. Used by `sparql_query` (3 fetches) and by the MQA metrics fetch in `quality.ts`.
+- **`assertHostnameResolvesSafe` is now fail-closed**: it distinguishes "DNS module absent (Workers) → no-op" from "resolution failed → throw". Previously a DNS error let the request proceed (fail-open / TOCTOU).
+- **GHSA-8hxx**: verified that WHATWG `URL` already normalizes IPv4 encodings (int/hex/octal/short) to dotted-decimal before `validateServerUrl` → the existing check already covers them. No code added (the advisory PoC tested the regex against raw strings, not the parsed hostname). Only a comment and regression tests. The remaining `::7f00:1` (IPv4-compatible IPv6) is not routable, as the advisory itself concedes.
+- MQA fetch: constant host (`data.europa.eu`), so hardening for consistency rather than a real vector.
+- 6 new tests (redirect→internal blocked, redirect→non-HTTPS rejected, fail-closed on DNS error, IPv4 encodings blocked). 438 passing. E2e: Wikidata via `safeFetch` fine, internal IP blocked. Worker build fine.
+- Further security hardening in progress for upcoming releases.
 
 ### v0.4.109
 
-Security hardening — 3 advisories, "veleno + porta" (rischio ambientale prima dei coltelli):
+Security hardening — 3 advisories, "poison and door" (environmental risk before the knives):
 
-- **GHSA-3369** (second-order SSRF, `ckan_list_resources`): source-portal probing è ora **opt-in** (`check_source_portal` default `false`). Prima era ON: elencare le risorse di un dataset faceva contattare host/porte presi dai dati del dataset (confused-deputy + port-scan oracle + amplificazione via `Promise.all`). Aggiunto: drop delle porte ≠80/443 in `extractSourcePortal` (usa `hostname`, non `host`), cap del fan-out a 10 probe.
-- **GHSA-c499** (indirect prompt injection): campi liberi del portale (`notes`, resource `description`) resi verbatim nell'output. Ora avvolti in un blocco `untrusted` delimitato con avviso (`wrapUntrusted`), fence interne neutralizzate; URL portale validati per scheme (solo http/https) e resi in inline-code (`safeUrlText`); celle tabella di `ckan_list_resources` neutralizzate (`|`, newline). Contenimento, non fix totale — documentato agli integratori.
-- **GHSA-v3j5** (HTTP transport esposto): bind **`127.0.0.1`** di default (era `0.0.0.0`), `enableDnsRebindingProtection` + `allowedHosts`/`allowedOrigins`. `docker-compose.yml` pubblica su `127.0.0.1:3000:3000` (+ `CKAN_HTTP_HOST=0.0.0.0` dentro il container). Nuove env: `CKAN_HTTP_HOST`, `CKAN_HTTP_ALLOWED_HOSTS`, `CKAN_HTTP_ALLOWED_ORIGINS`. Chiudere questa porta declassa l'intero cluster SSRF da "remoto" a "locale".
-- 4 nuovi test; 432 passati. Verificato e2e su deployment HTTP reale (bind loopback, 403 su Host non consentito, no-probe di default, notes fenced). Worker: build ok.
-- Docs: README (tabella env HTTP), SKILL (source-portal ora opt-in), docker/README, docker-compose.
-- **Non ancora fatti** (cluster SSRF fetch, MQA regex, cache, decompression bomb, postMessage UI): coltelli e hardening, in giri successivi.
+- **GHSA-3369** (second-order SSRF, `ckan_list_resources`): source-portal probing is now **opt-in** (`check_source_portal` defaults to `false`). It used to be ON: listing a dataset's resources contacted hosts and ports taken from the dataset's own data (confused deputy + port-scan oracle + amplification via `Promise.all`). Added: ports other than 80/443 dropped in `extractSourcePortal` (uses `hostname`, not `host`), fan-out capped at 10 probes.
+- **GHSA-c499** (indirect prompt injection): free-text portal fields (`notes`, resource `description`) were rendered verbatim in the output. They are now wrapped in a delimited `untrusted` block with a warning (`wrapUntrusted`), with inner fences neutralized; portal URLs are scheme-validated (http/https only) and rendered as inline code (`safeUrlText`); `ckan_list_resources` table cells are neutralized (`|`, newlines). Containment, not a complete fix — documented for integrators.
+- **GHSA-v3j5** (exposed HTTP transport): binds to **`127.0.0.1`** by default (was `0.0.0.0`), `enableDnsRebindingProtection` plus `allowedHosts`/`allowedOrigins`. `docker-compose.yml` publishes on `127.0.0.1:3000:3000` (with `CKAN_HTTP_HOST=0.0.0.0` inside the container). New env vars: `CKAN_HTTP_HOST`, `CKAN_HTTP_ALLOWED_HOSTS`, `CKAN_HTTP_ALLOWED_ORIGINS`. Closing this door downgrades the whole SSRF cluster from "remote" to "local".
+- 4 new tests; 432 passing. Verified e2e against a real HTTP deployment (loopback bind, 403 on disallowed Host, no probing by default, notes fenced). Worker build fine.
+- Docs: README (HTTP env var table), SKILL (source-portal now opt-in), docker/README, docker-compose.
+- **Not done yet** (fetch SSRF cluster, MQA regex, cache, decompression bomb, postMessage UI): knives and hardening, in later rounds.
 
 ## 2026-06-22
 

package/dist/index.js

@@ -1009,26 +1009,48 @@ function truncateText(text, limit = CHARACTER_LIMIT) {
 
 ... [Response truncated at ${limit} characters]`;
 }
+var SHRINKABLE_KEYS = [
+  "results",
+  "records",
+  "rows",
+  "datasets",
+  "resources",
+  "packages",
+  "organizations",
+  "groups",
+  "portals",
+  "tags",
+  "facets",
+  "fields"
+];
 function truncateJson(obj, limit = CHARACTER_LIMIT) {
   let json = JSON.stringify(obj, null, 2);
   if (json.length <= limit) return json;
   json = JSON.stringify(obj);
   if (json.length <= limit) return json;
   const data = structuredClone(obj);
-  const arrayKeys = ["results", "records", "resources", "packages", "organizations", "groups", "tags"];
-  for (const key of arrayKeys) {
+  for (const key of SHRINKABLE_KEYS) {
     if (Array.isArray(data[key]) && data[key].length > 0) {
       const originalCount = data[key].length;
-      while (data[key].length > 1) {
+      data["_truncated"] = true;
+      data["_original_count"] = originalCount;
+      while (data[key].length > 0) {
         data[key].pop();
-        data["_truncated"] = true;
-        data["_original_count"] = originalCount;
         json = JSON.stringify(data);
         if (json.length <= limit) return json;
       }
     }
   }
-  return truncateText(JSON.stringify(data), limit);
+  const explained = JSON.stringify({
+    _truncated: true,
+    _error: `Response exceeded the ${limit} character limit and could not be reduced to fit. Narrow the query or use pagination.`
+  });
+  if (explained.length <= limit) return explained;
+  const bare = JSON.stringify({ _truncated: true });
+  return bare.length <= limit ? bare : "{}";
+}
+function formatError(message, asJson) {
+  return asJson ? JSON.stringify({ error: message, _error: true }, null, 2) : message;
 }
 function wrapUntrusted(text) {
   const safe = String(text).replace(/```/g, "\u02BC\u02BC\u02BC");
@@ -2016,7 +2038,7 @@ Note: showing top ${sorted.length} only. Use \`response_format: json\` for full
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_package_search") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_package_search"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -2137,7 +2159,7 @@ Typical workflow: ckan_find_relevant_datasets \u2192 ckan_package_show (inspect
         };
         if (params.response_format === "json" /* JSON */) {
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify(payload, null, 2)) }],
+            content: [{ type: "text", text: truncateJson(payload) }],
             structuredContent: payload
           };
         }
@@ -2218,7 +2240,7 @@ Typical workflow: ckan_find_relevant_datasets \u2192 ckan_package_show (inspect
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_find_relevant_datasets") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_find_relevant_datasets"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -2294,7 +2316,7 @@ Typical workflow: ckan_package_show \u2192 pick a resource with datastore_active
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_package_show") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_package_show"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -2396,7 +2418,7 @@ dataset's own resource URLs); set check_source_portal=true to enable it.`,
             resources: summary
           };
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify(payload, null, 2)) }],
+            content: [{ type: "text", text: truncateJson(payload) }],
             structuredContent: payload
           };
         }
@@ -2459,7 +2481,7 @@ dataset's own resource URLs); set check_source_portal=true to enable it.`,
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_list_resources") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_list_resources"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -2746,7 +2768,7 @@ Note: organization_list returned 500; using package_search facets.
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_organization_list") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_organization_list"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -2807,7 +2829,7 @@ Typical workflow: ckan_organization_show \u2192 ckan_package_show (inspect a dat
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_organization_show") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_organization_show"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -2874,7 +2896,7 @@ Typical workflow: ckan_organization_search \u2192 ckan_organization_show (get de
             }))
           };
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify(jsonResult, null, 2)) }],
+            content: [{ type: "text", text: truncateJson(jsonResult) }],
             structuredContent: jsonResult
           };
         }
@@ -2915,7 +2937,7 @@ Typical workflow: ckan_organization_search \u2192 ckan_organization_show (get de
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_organization_search") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_organization_search"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -3127,7 +3149,7 @@ Typical workflow: ckan_package_search \u2192 ckan_package_show (find resource_id
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_datastore_search") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_datastore_search"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -3188,7 +3210,7 @@ Security note: SQL queries are forwarded directly to the CKAN DataStore API. The
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_datastore_search_sql") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_datastore_search_sql"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -3251,7 +3273,7 @@ Typical workflow: ckan_status_show (verify server is up) \u2192 ckan_package_sea
         ]);
         const markdown = formatStatusMarkdown(result, params.server_url, hvdCount);
         return {
-          content: [{ type: "text", text: addDemoFooter(markdown) }],
+          content: [{ type: "text", text: truncateText(addDemoFooter(markdown)) }],
           structuredContent: result
         };
       } catch (error) {
@@ -3363,7 +3385,7 @@ Typical workflow: ckan_tag_list \u2192 ckan_package_search with fq="tags:tag_nam
             tags
           };
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify(output, null, 2)) }],
+            content: [{ type: "text", text: truncateJson(output) }],
             structuredContent: output
           };
         }
@@ -3397,7 +3419,7 @@ Typical workflow: ckan_tag_list \u2192 ckan_package_search with fq="tags:tag_nam
         return {
           content: [{
             type: "text",
-            text: `Error listing tags: ${error instanceof Error ? error.message : String(error)}`
+            text: formatError(`Error listing tags: ${error instanceof Error ? error.message : String(error)}`, params.response_format === "json" /* JSON */)
           }],
           isError: true
         };
@@ -3640,7 +3662,7 @@ Typical workflow: ckan_group_list \u2192 ckan_group_show (inspect one) \u2192 ck
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_group_list") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_group_list"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -3698,7 +3720,7 @@ Typical workflow: ckan_group_show \u2192 ckan_package_show (inspect a dataset) \
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_group_show") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_group_show"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -3760,7 +3782,7 @@ Typical workflow: ckan_group_search \u2192 ckan_group_show (get details) \u2192
             }))
           };
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify(jsonResult, null, 2)) }],
+            content: [{ type: "text", text: truncateJson(jsonResult) }],
             structuredContent: jsonResult
           };
         }
@@ -3800,7 +3822,7 @@ Typical workflow: ckan_group_search \u2192 ckan_group_show (get details) \u2192
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_group_search") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_group_search"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -4457,25 +4479,31 @@ function registerQualityTools(server) {
         return {
           content: [{
             type: "text",
-            text: `Error: MQA quality metrics are only available for dati.gov.it datasets. Provided server: ${server_url}
+            text: formatError(
+              `Error: MQA quality metrics are only available for dati.gov.it datasets. Provided server: ${server_url}
 
-The MQA (Metadata Quality Assurance) system is operated by data.europa.eu and only evaluates datasets from Italian open data portal.`
-          }]
+The MQA (Metadata Quality Assurance) system is operated by data.europa.eu and only evaluates datasets from Italian open data portal.`,
+              response_format === "json" /* JSON */
+            )
+          }],
+          isError: true
         };
       }
       try {
         const qualityData = await getMqaQuality(server_url, dataset_id);
         const format = response_format || "markdown" /* MARKDOWN */;
-        const output = format === "json" /* JSON */ ? JSON.stringify(qualityData, null, 2) : formatQualityMarkdown(qualityData, dataset_id);
+        const output = format === "json" /* JSON */ ? truncateJson(qualityData) : truncateText(addDemoFooter(formatQualityMarkdown(qualityData, dataset_id)));
         return {
           content: [{
             type: "text",
-            text: addDemoFooter(output)
+            text: output
           }]
         };
       } catch (error) {
+        const message = `Error retrieving quality metrics: ${formatCkanError(error, "ckan_get_mqa_quality")}`;
         return {
-          content: [{ type: "text", text: `Error retrieving quality metrics: ${formatCkanError(error, "ckan_get_mqa_quality")}` }]
+          content: [{ type: "text", text: formatError(message, response_format === "json" /* JSON */) }],
+          isError: true
         };
       }
     }
@@ -4502,25 +4530,31 @@ The MQA (Metadata Quality Assurance) system is operated by data.europa.eu and on
         return {
           content: [{
             type: "text",
-            text: `Error: MQA quality details are only available for dati.gov.it datasets. Provided server: ${server_url}
+            text: formatError(
+              `Error: MQA quality details are only available for dati.gov.it datasets. Provided server: ${server_url}
 
-The MQA (Metadata Quality Assurance) system is operated by data.europa.eu and only evaluates datasets from Italian open data portal.`
-          }]
+The MQA (Metadata Quality Assurance) system is operated by data.europa.eu and only evaluates datasets from Italian open data portal.`,
+              response_format === "json" /* JSON */
+            )
+          }],
+          isError: true
         };
       }
       try {
         const details = await getMqaQualityDetails(server_url, dataset_id);
         const format = response_format || "markdown" /* MARKDOWN */;
-        const output = format === "json" /* JSON */ ? JSON.stringify(details, null, 2) : formatQualityDetailsMarkdown(details, dataset_id);
+        const output = format === "json" /* JSON */ ? truncateJson(details) : truncateText(addDemoFooter(formatQualityDetailsMarkdown(details, dataset_id)));
         return {
           content: [{
             type: "text",
-            text: addDemoFooter(output)
+            text: output
           }]
         };
       } catch (error) {
+        const message = `Error retrieving quality details: ${formatCkanError(error, "ckan_get_mqa_quality_details")}`;
         return {
-          content: [{ type: "text", text: `Error retrieving quality details: ${formatCkanError(error, "ckan_get_mqa_quality_details")}` }]
+          content: [{ type: "text", text: formatError(message, response_format === "json" /* JSON */) }],
+          isError: true
         };
       }
     }
@@ -4686,7 +4720,7 @@ Typical workflow: ckan_analyze_datasets \u2192 ckan_datastore_search (with known
         }));
         if (params.response_format === "json" /* JSON */) {
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify({ total: searchResult.count, datasets: analyzed }, null, 2)) }]
+            content: [{ type: "text", text: truncateJson({ total: searchResult.count, datasets: analyzed }) }]
           };
         }
         const markdown = formatAnalyzeDatasetsMarkdown(
@@ -4700,7 +4734,7 @@ Typical workflow: ckan_analyze_datasets \u2192 ckan_datastore_search (with known
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_analyze_datasets") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_analyze_datasets"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -4779,7 +4813,7 @@ Typical workflow: ckan_catalog_stats (understand the portal) \u2192 ckan_package
         );
         if (params.response_format === "json" /* JSON */) {
           return {
-            content: [{ type: "text", text: truncateText(JSON.stringify({ total: result.count, facets: result.facets }, null, 2)) }]
+            content: [{ type: "text", text: truncateJson({ total: result.count, facets: result.facets }) }]
           };
         }
         const markdown = formatCatalogStatsMarkdown(params.server_url, result.count, result.facets);
@@ -4788,7 +4822,7 @@ Typical workflow: ckan_catalog_stats (understand the portal) \u2192 ckan_package
         };
       } catch (error) {
         return {
-          content: [{ type: "text", text: formatCkanError(error, "ckan_catalog_stats") }],
+          content: [{ type: "text", text: formatError(formatCkanError(error, "ckan_catalog_stats"), params.response_format === "json" /* JSON */) }],
           isError: true
         };
       }
@@ -4952,26 +4986,21 @@ Typical workflow: sparql_query (explore schema) \u2192 sparql_query (targeted qu
         const data = await querySparqlEndpoint(params.endpoint_url, limitedQuery);
         if (params.response_format === "json" /* JSON */) {
           const result = formatSparqlJson(data);
-          let text2 = JSON.stringify(result, null, 2);
-          if (text2.length > CHARACTER_LIMIT) {
-            text2 = text2.slice(0, CHARACTER_LIMIT) + "\n/* output truncated */";
-          }
           return {
-            content: [{ type: "text", text: text2 }],
+            content: [{ type: "text", text: truncateJson(result) }],
             structuredContent: result
           };
         }
-        let text = formatSparqlMarkdown(data, params.endpoint_url);
-        if (text.length > CHARACTER_LIMIT) {
-          text = text.slice(0, CHARACTER_LIMIT) + "\n\n_Output truncated._";
-        }
-        return { content: [{ type: "text", text }] };
+        return {
+          content: [{ type: "text", text: truncateText(formatSparqlMarkdown(data, params.endpoint_url)) }]
+        };
       } catch (error) {
+        const message = `SPARQL query failed:
+${error instanceof Error ? error.message : String(error)}`;
         return {
           content: [{
             type: "text",
-            text: `SPARQL query failed:
-${error instanceof Error ? error.message : String(error)}`
+            text: formatError(message, params.response_format === "json" /* JSON */)
           }],
           isError: true
         };
@@ -5081,7 +5110,7 @@ Typical workflow: ckan_find_portals (discover portal URL) \u2192 ckan_status_sho
         });
         const markdown = formatMarkdown(results, active.length, params.limit);
         return {
-          content: [{ type: "text", text: addDemoFooter(markdown) }],
+          content: [{ type: "text", text: truncateText(addDemoFooter(markdown)) }],
           structuredContent: { portals: results.map((p) => ({
             url: p.Href,
             title: p.SiteInfo.site_title,
@@ -5144,7 +5173,7 @@ function registerDatasetResource(server) {
         const result = await makeCkanRequest(serverUrl, "package_show", {
           id
         });
-        const content = truncateText(JSON.stringify(result, null, 2));
+        const content = truncateJson(result);
         return {
           contents: [
             {
@@ -5188,7 +5217,7 @@ function registerResourceResource(server) {
         const result = await makeCkanRequest(serverUrl, "resource_show", {
           id
         });
-        const content = truncateText(JSON.stringify(result, null, 2));
+        const content = truncateJson(result);
         return {
           contents: [
             {
@@ -5239,7 +5268,7 @@ function registerOrganizationResource(server) {
             include_datasets: false
           }
         );
-        const content = truncateText(JSON.stringify(result, null, 2));
+        const content = truncateJson(result);
         return {
           contents: [
             {
@@ -5298,7 +5327,7 @@ var registerDatasetFilterResource = (server, config) => {
           q: "*:*",
           fq
         });
-        const content = truncateText(JSON.stringify(result, null, 2));
+        const content = truncateJson(result);
         return {
           contents: [
             {