@cyanheads/who-gho-mcp-server 0.1.3 → 0.1.5

package/CLAUDE.md

@@ -1,11 +1,9 @@
-# Developer Protocol
+# Agent Protocol
 
-**Server:** who-gho-mcp-server
-**Version:** 0.1.3
+**Server:** @cyanheads/who-gho-mcp-server
+**Version:** 0.1.5
 **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.7`
-**Engines:** Bun ≥1.3.0, Node ≥24.0.0
-**MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
-**Zod:** ^4.4.3
+**Engines:** Bun ≥1.3.2, Node ≥24.0.0
 
 > **Read the framework docs first:** `node_modules/@cyanheads/mcp-ts-core/CLAUDE.md` contains the full API reference — builders, Context, error codes, exports, patterns. This file covers server-specific conventions only.
 
@@ -13,7 +11,7 @@
 
 ## What's Next?
 
-When the user asks what's next or needs direction, suggest options based on the current project state. Common next steps:
+When the user asks what to do next, what's left, or needs direction, suggest relevant options based on the current project state:
 
 1. **Re-run the `setup` skill** — ensures CLAUDE.md, skills, structure, and metadata are populated and up to date with the current codebase
 2. **Run the `design-mcp-server` skill** — if the tool/resource surface hasn't been mapped yet, work through domain design
@@ -251,21 +249,24 @@ Available skills:
 | `add-service` | Scaffold a new service integration |
 | `add-test` | Scaffold test file for a tool, resource, or service |
 | `field-test` | Exercise tools/resources/prompts with real inputs, verify behavior, report issues |
+| `tool-defs-analysis` | Read-only audit of definition language: voice, leaks, defaults, recovery hints, examples |
 | `security-pass` | Audit server for MCP-flavored security gaps: output injection, scope blast radius, input sinks, tenant isolation |
 | `devcheck` | Lint, format, typecheck, audit |
 | `polish-docs-meta` | Finalize docs, README, metadata, and agent protocol for shipping |
-| `maintenance` | Investigate changelogs, adopt upstream changes, sync skills to agent dirs |
-| `report-issue-framework` | File a bug or feature request against `@cyanheads/mcp-ts-core` via `gh` CLI |
-| `report-issue-local` | File a bug or feature request against this server's own repo via `gh` CLI |
+| `maintenance` | Investigate changelogs, adopt upstream changes, and sync skills after `bun update --latest` |
+| `release-and-publish` | Ship a release: verification gate, push commits+tags, publish to npm / MCP Registry / GHCR / `.mcpb` bundle on GitHub Releases |
+| `report-issue-framework` | File bug/feature request against @cyanheads/mcp-ts-core |
+| `report-issue-local` | File bug/feature request against this server's repo |
 | `api-auth` | Auth modes, scopes, JWT/OAuth |
 | `api-canvas` | DataCanvas: register tabular data, run SQL, export, plus the `spillover()` helper for big result sets — Tier 3 opt-in |
 | `api-config` | AppConfig, parseConfig, env vars |
 | `api-context` | Context interface, logger, state, progress |
 | `api-errors` | McpError, JsonRpcErrorCode, error patterns |
+| `api-linter` | Definition lint rules reference (`format-parity`, `schema-*`, `server-json-*`, …) |
 | `api-services` | LLM, Speech, Graph services |
+| `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
 | `api-testing` | createMockContext, test patterns |
 | `api-utils` | Formatting, parsing, security, pagination, scheduling, telemetry helpers |
-| `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
 | `api-workers` | Cloudflare Workers runtime |
 
 When you complete a skill's checklist, check the boxes and add a completion timestamp at the end (e.g., `Completed: 2026-03-11`).
@@ -274,72 +275,53 @@ When you complete a skill's checklist, check the boxes and add a completion time
 
 ## Commands
 
-**Runtime:** Scripts use `tsx` — both `npm run <cmd>` and `bun run <cmd>` work. `bun` is slightly faster for script invocation but not required.
-
 | Command | Purpose |
 |:--------|:--------|
-| `npm run build` | Compile TypeScript |
-| `npm run rebuild` | Clean + build |
-| `npm run clean` | Remove build artifacts |
-| `npm run devcheck` | Lint + format + typecheck + security + changelog sync |
-| `bun run audit:refresh` | Delete `bun.lock`, reinstall, re-audit. Use when `devcheck` flags a transitive advisory — stale lockfile can mask already-patched deps. If advisory survives, it's real. |
-| `npm run tree` | Generate directory structure doc |
-| `npm run format` | Auto-fix formatting |
-| `npm test` | Run tests |
-| `npm run start:stdio` | Production mode (stdio) |
-| `npm run start:http` | Production mode (HTTP) |
-| `npm run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
-| `npm run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
-| `npm run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
+| `bun run build` | Compile TypeScript |
+| `bun run rebuild` | Clean + build |
+| `bun run clean` | Remove build artifacts |
+| `bun run devcheck` | Lint + format + typecheck + security + packaging alignment |
+| `bun run audit:refresh` | Delete `bun.lock`, reinstall, and re-run `bun audit`. Use when `devcheck` flags a transitive advisory — `bun update` is sticky on transitive resolutions, so the advisory may be a stale-lockfile false positive. If it survives the refresh, it's real. |
+| `bun run tree` | Generate directory structure doc |
+| `bun run format` | Auto-fix formatting |
+| `bun run test` | Run tests |
+| `bun run lint:mcp` | Validate MCP definitions against spec |
+| `bun run lint:packaging` | Validate env var alignment between `manifest.json` and `server.json` (skipped cleanly when `manifest.json` is absent) |
+| `bun run list-skills` | List skills in `skills/` with name + description |
+| `bun run bundle` | Build and pack as `dist/who-gho-mcp-server.mcpb` for one-click Claude Desktop install |
+| `bun run start:stdio` | Production mode (stdio) |
+| `bun run start:http` | Production mode (HTTP) |
 
 ---
 
 ## Bundling
 
-`npm run bundle` produces a `.mcpb` extension bundle for one-click install in Claude Desktop. MCPB is stdio-only — HTTP and Cloudflare Workers deployments are unaffected. Consumers who don't need it can delete `manifest.json` and `.mcpbignore`; `lint:packaging` skips cleanly.
-
-**Adding an env var requires both files:** `server.json` (registry discovery, `environmentVariables[]`) and `manifest.json` (bundle install UX, `mcp_config.env` + `user_config`). `lint:packaging` (run by `devcheck`) verifies the env var names match.
-
-**README install badges.** Drop these into the project README to give users one-click install paths. Fill in `<OWNER>` / `<REPO>` / `<PACKAGE_NAME>` and encode the per-server config. Cursor + VS Code badges assume the server is published to npm; Claude Desktop downloads the `.mcpb` directly so npm publishing isn't required.
+`bun run bundle` produces `dist/who-gho-mcp-server.mcpb` for one-click install in Claude Desktop. MCPB is stdio-only — HTTP and Docker deployments are unaffected. The `release-and-publish` skill attaches the bundle to the GitHub Release at a stable `releases/latest/download/who-gho-mcp-server.mcpb` URL that powers the README install badge.
 
-| Client | Mechanism |
-|:-------|:----------|
-| Claude Desktop | Browser downloads the `.mcpb` from the latest GitHub Release; OS file handler routes it to Claude Desktop, which opens the install dialog. No deep-link URL scheme yet — this is the canonical path. |
-| Cursor | Official `https://cursor.com/en/install-mcp` endpoint with base64 JSON config. |
-| VS Code / Insiders | Official `vscode:mcp/install?...` deep link, wrapped in `https://vscode.dev/redirect?url=` so GitHub-rendered markdown doesn't strip the non-HTTP scheme. |
-| Claude Code / Codex | CLI only (`claude mcp add` / `codex mcp add`); no URL scheme. |
+**Adding an env var requires both files**: `server.json` stdio `environmentVariables[]` (registry discovery) and `manifest.json` `mcp_config.env` (bundle install UX, plus `user_config` if user-prompted). `bun run lint:packaging` (run by `devcheck`) verifies the env var names align.
 
-```markdown
-[![Install in Claude Desktop](https://img.shields.io/badge/Install_in-Claude_Desktop-D97757?style=for-the-badge&logo=anthropic&logoColor=white)](https://github.com/<OWNER>/<REPO>/releases/latest/download/<PACKAGE_NAME>.mcpb)
-[![Install in Cursor](https://cursor.com/deeplink/mcp-install-dark.svg)](https://cursor.com/en/install-mcp?name=<PACKAGE_NAME>&config=<BASE64_CONFIG>)
-[![Install in VS Code](https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=for-the-badge&logo=visualstudiocode&logoColor=white)](https://vscode.dev/redirect?url=vscode:mcp/install?<URLENCODED_JSON>)
-```
+---
 
-Both install links route through HTTPS endpoints (`cursor.com/en/install-mcp` and `vscode.dev/redirect`) — GitHub-rendered markdown strips non-HTTP URL schemes from anchors, so a raw `cursor://` or `vscode:` link won't click through from github.com.
+## Publishing
 
-Generate the encoded configs (replace `<PACKAGE_NAME>` and add env vars for any required API keys):
+Run the `release-and-publish` skill after git wrapup — it runs the verification gate (`devcheck`, `rebuild`, `test`), pushes commits and tags, and publishes to npm, the MCP Registry, GHCR, and attaches the `.mcpb` bundle to the GitHub Release, halting on the first failure. For reference, the underlying commands are:
 
 ```bash
-# Cursor: base64-encoded JSON. Split command/args, add env when keys are needed.
-echo -n '{"command":"npx","args":["-y","<PACKAGE_NAME>"],"env":{"API_KEY":"your-api-key"}}' | base64
-# Without env (no required keys):
-echo -n '{"command":"npx","args":["-y","<PACKAGE_NAME>"]}' | base64
-
-# VS Code: URL-encoded JSON. Same shape plus a `name` field.
-node -p 'encodeURIComponent(JSON.stringify({name:"<SHORT_NAME>",command:"npx",args:["-y","<PACKAGE_NAME>"],env:{API_KEY:"your-api-key"}}))'
-# Without env:
-node -p 'encodeURIComponent(JSON.stringify({name:"<SHORT_NAME>",command:"npx",args:["-y","<PACKAGE_NAME>"]}))'
-```
+bun publish --access public
 
-Both clients use the same `{command, args, env}` shape (matching `mcp.json` schema). VS Code adds a top-level `name` field. Omit `env` entirely when no API keys are needed — don't include empty objects or framework-only vars like `MCP_TRANSPORT_TYPE`.
+docker buildx build --platform linux/amd64,linux/arm64 \
+  -t ghcr.io/cyanheads/who-gho-mcp-server:<version> \
+  -t ghcr.io/cyanheads/who-gho-mcp-server:latest \
+  --push .
 
-The Claude Desktop badge requires the bundle to ship with a stable filename — `bun run bundle` outputs `dist/<PACKAGE_NAME>.mcpb`, and `release-and-publish` attaches that file to the GitHub Release. `releases/latest/download/<PACKAGE_NAME>.mcpb` then redirects to the most recent release.
+mcp-publisher publish
+```
 
 ---
 
 ## Changelog
 
-Directory-based, grouped by minor series via the `.x` semver-wildcard convention. Source of truth: `changelog/<major.minor>.x/<version>.md` (e.g. `changelog/0.1.x/0.1.0.md`) — one file per release, shipped in the npm package. At release, author the per-version file with a concrete version and date, then run `npm run changelog:build` to regenerate the rollup. `changelog/template.md` is a **pristine format reference** — never edited or moved; read it for the frontmatter + section layout when scaffolding. `CHANGELOG.md` is a **navigation index** (header + link + summary per version), regenerated by `npm run changelog:build` — devcheck hard-fails on drift; never hand-edit it.
+Directory-based, grouped by minor series via the `.x` semver-wildcard convention. Source of truth: `changelog/<major.minor>.x/<version>.md` (e.g. `changelog/0.1.x/0.1.0.md`) — one file per release, shipped in the npm package. At release, author the per-version file with a concrete version and date, then run `bun run changelog:build` to regenerate the rollup. `changelog/template.md` is a **pristine format reference** — never edited or moved; read it for the frontmatter + section layout when scaffolding. `CHANGELOG.md` is a **navigation index** (header + link + summary per version), regenerated by `bun run changelog:build` — devcheck hard-fails on drift; never hand-edit it.
 
 Each per-version file opens with YAML frontmatter:
 
@@ -388,4 +370,4 @@ import { getMyService } from '@/services/my-domain/my-service.js';
 - [ ] If wrapping external API: tests include at least one sparse payload case with omitted upstream fields
 - [ ] Registered in `createApp()` arrays (directly or via barrel exports)
 - [ ] Tests use `createMockContext()` from `@cyanheads/mcp-ts-core/testing`
-- [ ] `npm run devcheck` passes
+- [ ] `bun run devcheck` passes

package/Dockerfile

@@ -1,8 +1,5 @@
 # ==============================================================================
 # Build Stage
-#
-# This stage installs all dependencies (including dev), builds the TypeScript
-# source code into JavaScript, and prepares the production assets.
 # ==============================================================================
 FROM oven/bun:1.3 AS build
 
@@ -38,7 +35,7 @@ ENV NODE_ENV=production
 
 # OCI image metadata (https://github.com/opencontainers/image-spec/blob/main/annotations.md)
 LABEL org.opencontainers.image.title="@cyanheads/who-gho-mcp-server"
-LABEL org.opencontainers.image.description="MCP server for the WHO Global Health Observatory — 3,059 global health indicators across 194 member states with country, region, year, and sex filters."
+LABEL org.opencontainers.image.description="Query WHO Global Health Observatory data — 3,059 indicators across 194 member states with country, region, year, and sex filters via MCP. STDIO or Streamable HTTP."
 LABEL org.opencontainers.image.licenses="Apache-2.0"
 LABEL org.opencontainers.image.source="https://github.com/cyanheads/who-gho-mcp-server"
 

package/README.md

@@ -7,7 +7,7 @@
 
 <div align="center">
 
-[![Version](https://img.shields.io/badge/Version-0.1.2-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/who-gho-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/who-gho-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/who-gho-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
+[![Version](https://img.shields.io/badge/Version-0.1.5-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/who-gho-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/who-gho-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/who-gho-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
 
 </div>
 

package/package.json

@@ -1,42 +1,33 @@
 {
   "name": "@cyanheads/who-gho-mcp-server",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "mcpName": "io.github.cyanheads/who-gho-mcp-server",
-  "description": "MCP server for the WHO Global Health Observatory — 3,059 global health indicators across 194 member states with country, region, year, and sex filters.",
+  "description": "Query WHO Global Health Observatory data — 3,059 indicators across 194 member states with country, region, year, and sex filters via MCP. STDIO or Streamable HTTP.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
     "who-gho-mcp-server": "dist/index.js"
   },
-  "files": [
-    "changelog/",
-    "dist/",
-    "README.md",
-    "LICENSE",
-    "CLAUDE.md",
-    "AGENTS.md",
-    "Dockerfile",
-    "server.json"
-  ],
+  "files": ["dist/", "README.md", "LICENSE", "CLAUDE.md", "Dockerfile", "server.json"],
   "scripts": {
-    "build": "tsx scripts/build.ts",
-    "rebuild": "tsx scripts/clean.ts && tsx scripts/build.ts",
-    "clean": "tsx scripts/clean.ts",
-    "devcheck": "tsx scripts/devcheck.ts",
+    "build": "bun run scripts/build.ts",
+    "rebuild": "bun run scripts/clean.ts && bun run build",
+    "clean": "bun run scripts/clean.ts",
+    "devcheck": "bun run scripts/devcheck.ts",
+    "tree": "bun run scripts/tree.ts",
+    "format": "biome check --write --unsafe",
+    "test": "bunx vitest run",
     "audit:refresh": "rm -f bun.lock && bun install && bun audit",
-    "tree": "tsx scripts/tree.ts",
-    "list-skills": "tsx scripts/list-skills.ts",
-    "format": "biome check --write --unsafe .",
-    "lint:mcp": "tsx scripts/lint-mcp.ts",
-    "lint:packaging": "tsx scripts/lint-packaging.ts",
-    "bundle": "npm run build && npx -y @anthropic-ai/mcpb pack . dist/who-gho-mcp-server.mcpb",
-    "changelog:build": "tsx scripts/build-changelog.ts",
-    "changelog:check": "tsx scripts/build-changelog.ts --check",
-    "test": "vitest run",
-    "start": "node dist/index.js",
-    "start:stdio": "MCP_TRANSPORT_TYPE=stdio node dist/index.js",
-    "start:http": "MCP_TRANSPORT_TYPE=http node dist/index.js"
+    "list-skills": "bun run scripts/list-skills.ts",
+    "lint:mcp": "bun run scripts/lint-mcp.ts",
+    "lint:packaging": "bun run scripts/lint-packaging.ts",
+    "bundle": "bun run build && npx -y @anthropic-ai/mcpb pack . dist/who-gho-mcp-server.mcpb",
+    "changelog:build": "bun run scripts/build-changelog.ts",
+    "changelog:check": "bun run scripts/build-changelog.ts --check",
+    "publish-mcp": "mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish",
+    "start:stdio": "MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js",
+    "start:http": "MCP_TRANSPORT_TYPE=http bun ./dist/index.js"
   },
   "keywords": [
     "mcp",
@@ -94,7 +85,6 @@
     "depcheck": "^1.4.7",
     "ignore": "^7.0.5",
     "tsc-alias": "^1.8.17",
-    "tsx": "^4.22.3",
     "typescript": "^6.0.3",
     "vitest": "^4.1.7"
   }

package/server.json

@@ -1,19 +1,19 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.cyanheads/who-gho-mcp-server",
-  "description": "WHO Global Health Observatory MCP server — 3,059 health indicators across 194 member states.",
+  "description": "WHO Global Health Observatory — 3,059 indicators across 194 member states.",
   "repository": {
     "url": "https://github.com/cyanheads/who-gho-mcp-server",
     "source": "github"
   },
-  "version": "0.1.3",
+  "version": "0.1.5",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@cyanheads/who-gho-mcp-server",
       "runtimeHint": "bun",
-      "version": "0.1.3",
+      "version": "0.1.5",
       "packageArguments": [
         {
           "type": "positional",
@@ -42,7 +42,7 @@
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@cyanheads/who-gho-mcp-server",
       "runtimeHint": "bun",
-      "version": "0.1.3",
+      "version": "0.1.5",
       "packageArguments": [
         {
           "type": "positional",

package/changelog/0.1.x/0.1.0.md

@@ -1,20 +0,0 @@
----
-summary: "Initial release — WHO GHO MCP server with 6 tools and 2 resources for the Global Health Observatory OData API"
-breaking: false
-security: false
----
-
-# 0.1.0 — 2026-05-23
-
-## Added
-
-- **`who_search_indicators`** — keyword search across 3,059 GHO indicators by name substring.
-- **`who_list_indicators`** — paginated browse of the full indicator catalog.
-- **`who_get_indicator_metadata`** — batch dimension lookup for up to 10 indicator codes; strips `PUBLISHSTATE` internal dimension from output.
-- **`who_query_indicator_data`** — primary data tool; queries a single indicator with country/region/income-group/year/sex/dim1 filters via OData; raises `ambiguous_spatial_filter` when more than one spatial type is provided.
-- **`who_list_dimension_values`** — valid values for any GHO dimension type (COUNTRY, SEX, AGEGROUP, WORLDBANKINCOMEGROUP, etc.).
-- **`who_list_dimensions`** — full list of GHO dimension type codes and titles.
-- **`who://indicator/{indicatorCode}/metadata`** resource — indicator metadata by URI.
-- **`who://dimension/{dimensionCode}/values`** resource — dimension values by URI.
-- **`GhoService`** — OData API client with retry, timeout, HTML-error-page detection, and `PUBLISHSTATE` filtering.
-- **`GHO_BASE_URL`** / **`GHO_REQUEST_TIMEOUT_MS`** env vars for API URL override and request timeout.

package/changelog/0.1.x/0.1.1.md

@@ -1,23 +0,0 @@
----
-summary: "Initial public release — WHO GHO MCP server, 6 tools and 2 resources for 3,059 Global Health Observatory indicators across 194 member states"
-breaking: false
-security: false
----
-
-# 0.1.1 — 2026-05-23
-
-First npm-published release. Packages the full WHO Global Health Observatory integration: OData API client, tool and resource surface, install badges, and bundling support.
-
-## Added
-
-- **`who_search_indicators`** — keyword search across 3,059 GHO indicators by name substring.
-- **`who_list_indicators`** — paginated browse of the full indicator catalog.
-- **`who_get_indicator_metadata`** — batch dimension lookup for up to 10 indicator codes; strips `PUBLISHSTATE` internal dimension from output.
-- **`who_query_indicator_data`** — primary data tool; queries a single indicator with country/region/income-group/year/sex/dim1 filters via OData; raises `ambiguous_spatial_filter` when more than one spatial type is provided.
-- **`who_list_dimension_values`** — valid values for any GHO dimension type (COUNTRY, SEX, AGEGROUP, WORLDBANKINCOMEGROUP, etc.).
-- **`who_list_dimensions`** — full list of GHO dimension type codes and titles.
-- **`who://indicator/{indicatorCode}/metadata`** resource — indicator metadata by URI.
-- **`who://dimension/{dimensionCode}/values`** resource — dimension values by URI.
-- **`GhoService`** — OData API client with retry, timeout, HTML-error-page detection, and `PUBLISHSTATE` filtering.
-- **`GHO_BASE_URL`** / **`GHO_REQUEST_TIMEOUT_MS`** env vars for API URL override and request timeout.
-- `manifest.json` for MCPB bundle support; install badges for Claude Desktop, Cursor, and VS Code.

package/changelog/0.1.x/0.1.2.md

@@ -1,12 +0,0 @@
----
-summary: "Fix indicator name resolution and document region_codes aggregate behavior"
-breaking: false
-security: false
----
-
-# 0.1.2 — 2026-05-23
-
-## Fixed
-
-- **`who_get_indicator_metadata`** / **`who://indicator/{code}/metadata`**: `indicatorName` now reflects the actual indicator name. `GhoService.listIndicators` accepts an `indicatorCode` param that applies an `IndicatorCode eq '...'` OData filter; both call sites updated to pass the code.
-- **`who_query_indicator_data`**: `region_codes` description now documents that region rows are aggregates, not per-country breakdowns, and how to retrieve country-level data instead.

package/changelog/0.1.x/0.1.3.md

@@ -1,20 +0,0 @@
----
-summary: "Tool description fixes and metadata sync to gold standard"
-breaking: false
-security: false
----
-
-# 0.1.3 — 2026-05-23
-
-## Fixed
-
-- **`who_list_dimensions`**: description referred to "this endpoint" — changed to "this tool".
-- **`who_query_indicator_data`**: sex filter description replaced the internal `Dim1Type=SEX` implementation detail with behavior-facing wording. `dim1_value` description now includes a concrete example code (`YEARS05-14`).
-
-## Changed
-
-- **`package.json`**: added `mcpName`, `bugs`, `homepage`, `author`, `funding`, `packageManager`; keywords expanded; `repository.url` corrected to `git+https://…git` form; `engines.bun` raised to `>=1.3.2`.
-- **`server.json`**: `name` changed to `io.github.cyanheads/who-gho-mcp-server`; `runtimeHint` corrected from `node` to `bun`.
-- **`manifest.json`**: `repository`, `homepage`, `license` fields added.
-- **`Dockerfile`**: OCI labels updated — title uses scoped package name, description filled in, `source` label added.
-- **`bunfig.toml`**: added (`[install]` and `[run]` config for Bun).

package/changelog/template.md

@@ -1,119 +0,0 @@
----
-# FORMAT REFERENCE — do not edit. Copy this file to
-# `changelog/<major.minor>.x/<version>.md` (e.g. `changelog/0.8.x/0.8.6.md`)
-# to author a new release. Set that file's H1 to `# <version> — YYYY-MM-DD`
-# with a concrete date.
-
-# Required. One-line GitHub Release-style headline. 350 character cap.
-# Default short and scannable. Don't pad, don't stitch unrelated changes with
-# semicolons — pick the headline. Quotes required: unquoted YAML treats `: `
-# inside the value as a key separator and fails GitHub's strict parser.
-summary: ""
-
-# Set `true` when consumers must change code to upgrade: API removals,
-# signature changes, config renames, behavior changes that break existing
-# usage. Flagged as `Breaking` in the rollup.
-breaking: false
-
-# Set `true` if this release contains any security fix. Pairs with the
-# `## Security` section below. Flagged as `Security` in the rollup so
-# users can triage upgrade urgency at a glance.
-security: false
----
-
-# <version> — YYYY-MM-DD
-
-<!--
-  AUTHORING GUIDE — applies to the new per-version file you create from this
-  template.
-
-  Audience: someone scanning release notes to decide what affects them. Lead
-  each bullet with the symbol or concept name in **bold** so they can skip
-  what's irrelevant and zoom in on what's not.
-
-  Tone: terse, fact-dense, not verbose. Default to one sentence per bullet —
-  name the symbol, state what changed, stop. Use a second sentence only when
-  it carries weight. If a bullet feels long, it is.
-
-  Cut: mechanism walkthroughs (those belong in JSDoc, AGENTS.md, or the
-  relevant skill), ceremonial framings ("This release introduces…",
-  backwards-compat paragraphs), file-by-file test enumerations, internal
-  implementation notes. Prefer code/symbol names over English re-explanations.
-
-  Narrative intro: skip by default. Add one short sentence only when the
-  release theme genuinely needs framing the bullets can't carry.
-
-  Sections: Keep a Changelog order — Added, Changed, Deprecated, Removed,
-  Fixed, Security. Include only sections with entries; delete the rest
-  (including the commented-out scaffolding below). Don't ship empty headers.
-
-  Include: every distinct fact a reader needs to adopt or audit the release —
-  new exports, signatures, lint rule IDs, env vars, breaking changes, version
-  bumps on shipped skills. Nothing more.
-
-  Links: link issues, PRs, docs, or skills where they help a reader jump to
-  context. Once per item per entry — don't re-link the same issue in summary,
-  narrative, and bullet. Skip links for inline symbol names; code spans speak
-  for themselves.
-
-  Issue/PR URLs: use full URLs. GitHub's bare `#NN` auto-link only resolves
-  inside its own UI, not in npm reads or local editors.
-
-      [#38](https://github.com/cyanheads/mcp-ts-core/issues/38)   ← issue
-      [#42](https://github.com/cyanheads/mcp-ts-core/pull/42)     ← PR
-
-  Verify numbers exist before linking (`gh issue view NN`, `gh pr view NN`).
-  Never speculate on a future number — `#42` for an upcoming PR silently
-  resolves to whatever real item already owns 42, and timeline previews pull
-  in that unrelated item's metadata.
-
-  TAG ANNOTATIONS — the annotated tag body renders as the GitHub Release body
-  via `gh release create --notes-from-tag`. The tag is a derivative of this
-  changelog entry — a condensed, scannable version, not a copy. Format:
-
-    <theme — omit version number, GitHub prepends it>
-                                                          ← blank line
-    <1-2 sentence context: what this release does>
-                                                          ← blank line
-    Dependency bumps:                                     ← section header
-                                                          ← blank line
-    - `@cyanheads/mcp-ts-core` ^0.9.1 → ^0.9.6          ← bullet
-                                                          ← blank line
-    Changed:                                              ← only sections with entries
-                                                          ← blank line
-    - `format()` output includes `query` in text mode
-                                                          ← blank line
-    Added:
-                                                          ← blank line
-    - `manifest.json` scaffolded for MCPB bundle support
-    - Install badges (Claude Desktop, Cursor, VS Code)
-                                                          ← blank line
-    <N> tests pass; `bun run devcheck` clean.             ← footer
-
-  Never a flat comma-separated string. Always structured markdown with
-  sections. The tag must scan well as a rendered GitHub Release page.
--->
-
-## Added
-
--
-
-## Changed
-
--
-
-<!-- ## Deprecated
-
-- -->
-
-<!-- ## Removed
-
-- -->
-
-## Fixed
-
--
-
-<!-- ## Security
-
-- -->