@honua/mcp-server 0.0.10-alpha.0 → 0.1.0-beta.0

package/dist/src/certification/operator-catalog.d.ts

@@ -0,0 +1,90 @@
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { type JsonSchema } from "./schema-index.js";
+/**
+ * In-process mock of the honua-server `/mcp` operator surface.
+ *
+ * This is the offline, CI-default certification target: a representative
+ * streamable-HTTP MCP catalog shaped like the real honua-server `/mcp` (see
+ * honua-server #1950), NOT the retired 9-tool static `@honua/mcp-server`. It
+ * exists so the `mcp-sdk` CI gate can certify the operator surface — tools with
+ * output schemas, structured errors, cursor pagination, and an auth boundary —
+ * on every PR without a live server.
+ *
+ * Fixtures are derived from the vendored geospatial-mcp schemas: every mapped
+ * tool advertises the vendored inputSchema verbatim, so the certifier's
+ * conformance check exercises the real standard shape rather than a hand-rolled
+ * approximation.
+ *
+ * NOTE ON `honua_edit_features`: the real honua-server `/mcp` surface exposes NO
+ * feature-mutation tool — Honua does not support AI operational data editing
+ * (honua-server ADR-0028). This fixture nonetheless advertises `honua_edit_features`
+ * so the certifier keeps exercising the standard's OPTIONAL `mutation`-profile
+ * certification path (insert→update→delete round-trip, auth-boundary contract)
+ * for *other* adopters that choose to offer governed editing. It is a
+ * mutation-profile-adopter fixture, NOT a mirror of honua-server's product surface.
+ *
+ * Nothing here is a product server. It is a labeled test fixture whose only job
+ * is to give the certifier a faithful `/mcp`-shaped surface to certify offline.
+ */
+/** Canonical structured error the operator surface returns on failure paths. */
+export interface StructuredOperatorError {
+    /**
+     * Stable, machine-actionable code. The auth boundary emits `unauthenticated`
+     * / `permission_denied`; argument validation emits `invalid_argument`.
+     */
+    code: "unauthenticated" | "permission_denied" | "invalid_argument" | "not_found" | "execution_failed";
+    /** geoprocessing-error envelope (validates against common/geoprocessing-error.schema.json). */
+    error: {
+        kind: "ValidationFailed" | "AuthorizationDenied" | "UnknownDataset" | "UnknownProcess" | "ExecutionFailed" | "Timeout" | "Cancelled" | "OutputBindingFailed";
+        message: string;
+        stepId?: string;
+        violations?: {
+            code: string;
+            message: string;
+            fieldPath?: string;
+        }[];
+    };
+}
+export interface OperatorTool {
+    name: string;
+    title: string;
+    description: string;
+    inputSchema: JsonSchema;
+    outputSchema: JsonSchema;
+    readOnly: boolean;
+    /** Deterministic structured output for a successful (authenticated) call. */
+    sampleOutput: Record<string, unknown>;
+}
+/**
+ * Representative operator catalog. Every tool advertises its vendored standard
+ * inputSchema verbatim — including the Honua-extension discovery tools
+ * (`honua_list_capabilities`, `honua_resolve_entity`) and
+ * `honua_publish_service`, which the standard maps to its own `publish_service`
+ * entry as a documented divergence from the known-gap `publish_result` family.
+ */
+export declare function buildOperatorTools(): OperatorTool[];
+export interface OperatorResource {
+    uri: string;
+    name: string;
+    mimeType: string;
+    contents: unknown;
+}
+export declare function buildOperatorResources(): OperatorResource[];
+/** Page size for the paginated tools/list and resources/list responses. */
+export declare const CATALOG_PAGE_SIZE = 12;
+export interface OperatorCatalogOptions {
+    /**
+     * Whether an initial catalog page is followed by a `nextCursor` (default
+     * true). The certifier's pagination contract requires at least one paginated
+     * list; disable only for negative tests.
+     */
+    paginate?: boolean;
+}
+/**
+ * Build the low-level MCP `Server` for the mock operator catalog. Auth is
+ * enforced per request from `extra.authInfo` (populated by the HTTP transport
+ * from the bearer token), so a single server instance drives both the
+ * authenticated certification pass and the unauthenticated auth-contract pass.
+ */
+export declare function createOperatorCatalogServer(options?: OperatorCatalogOptions): Server;
+//# sourceMappingURL=operator-catalog.d.ts.map

package/dist/src/certification/operator-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-catalog.d.ts","sourceRoot":"","sources":["../../../src/certification/operator-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAUnE,OAAO,EAAE,KAAK,UAAU,EAA6D,MAAM,mBAAmB,CAAC;AAE/G;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,kBAAkB,CAAC;IACtG,+FAA+F;IAC/F,KAAK,EAAE;QACL,IAAI,EACA,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,GACT,WAAW,GACX,qBAAqB,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACtE,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AA0BD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,EAAE,CA6UnD;AAOD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,EAAE,CA2B3D;AAED,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAoCpC,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuHD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,sBAA2B,GAAG,MAAM,CAsGxF"}